cs-feat-design
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands such as
grepto search for concepts in the codebase andpython .codestable/tools/validate-yaml.pyto check the syntax of generated checklists. These commands are integral to its function as a design tool. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted content from user intents and project source files.
- Ingestion points: Project documentation in
.codestable/, source code, and user-provided{slug}-intent.mdfiles. - Boundary markers: None identified; external content is read into the context without explicit delimiters to ignore embedded instructions.
- Capability inventory: File system write access (design and checklist documents), subprocess calls (
grep,validate-yaml.py), and integration with other agent skills. - Sanitization: Use of a YAML validator for output files helps ensure structural integrity but does not sanitize instructional content.
Audit Metadata