enhance-prompt
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files which could contain malicious instructions. \n
- Ingestion points: The skill reads
DESIGN.mdfrom the current project directory as described in Step 2 of the enhancement pipeline. \n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when interpolating file content into the output prompt. \n
- Capability inventory: The skill utilizes
ReadandWritetools as defined in the skill configuration. \n - Sanitization: Content from
DESIGN.mdis included in the output without validation or escaping. \n - [EXTERNAL_DOWNLOADS]: The skill references official external resources for installation and technical guidance. \n
- Fetches guidelines from a well-known Google documentation domain for Stitch prompting. \n
- Provides installation instructions for a repository under a well-known organization.
Audit Metadata