redesign-existing-projects
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify an existing codebase, which acts as an untrusted data source. Maliciously crafted content within the project files could attempt to influence the agent's actions during the fixing phase.
- Ingestion points: The agent scans the existing codebase as part of the Diagnose workflow step.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The agent has the capability to read project files and write modifications to apply the requested redesign.
- Sanitization: No specific sanitization or validation logic for the processed code is defined.
- [SAFE]: The skill recommends using a well-known placeholder image service (picsum.photos), which is a standard development practice and does not involve sensitive data access.
Audit Metadata