impeccable
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it ingests and processes web content and text annotations from the browser during design sessions.\n
- Ingestion points: The server script
live-server.mjsaccepts element context includingouterHTMLandtextContent, as well as user-authored notes from the browser picking interface.\n - Boundary markers: The skill maintains structural integrity by using specific delimiters like
impeccable-variants-startandimpeccable-variants-endto isolate AI-generated code within the project's source files.\n - Capability inventory: The skill is capable of modifying the local project source through
live-accept.mjsandlive-wrap.mjs, which perform file system write operations based on user interaction.\n - Sanitization: Event data received from the browser is validated for correct structure in
live-server.mjsbefore being passed to the agent context.\n- [COMMAND_EXECUTION]: The skill executes local management scripts and system commands to facilitate its design operations.\n - Evidence: The polling client
live-poll.mjsexecutes internal scripts likelive-accept.mjsusingexecFileSyncto automate code updates.\n - Evidence: The utility
is-generated.mjsperforms shell calls togit check-ignoreto identify build artifacts and avoid writing persistent changes to temporary files.
Audit Metadata