skills/delorenj/skills/enhance-prompt/Gen Agent Trust Hub

enhance-prompt

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files which could contain malicious instructions. \n
  • Ingestion points: The skill reads DESIGN.md from the current project directory as described in Step 2 of the enhancement pipeline. \n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when interpolating file content into the output prompt. \n
  • Capability inventory: The skill utilizes Read and Write tools as defined in the skill configuration. \n
  • Sanitization: Content from DESIGN.md is included in the output without validation or escaping. \n
  • [EXTERNAL_DOWNLOADS]: The skill references official external resources for installation and technical guidance. \n
  • Fetches guidelines from a well-known Google documentation domain for Stitch prompting. \n
  • Provides installation instructions for a repository under a well-known organization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:55 AM
Security Audit — agent-trust-hub — enhance-prompt