new-app
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: Analyzed the skill instructions and found no malicious patterns across all 11 threat categories.
- [NO_CODE]: The skill consists entirely of instructional text and markdown templates without any executable scripts or binary files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting user input and writing it to a file (BUSINESS_LOGIC.md).
- Ingestion points: User responses to interview questions.
- Boundary markers: None explicitly used in the final file write instruction.
- Capability inventory: Read, Write, Edit (SKILL.md).
- Sanitization: None present.
- Analysis: While the skill processes untrusted user data, the output is restricted to a documentation file, which does not present a path to code execution or exfiltration under current configuration.
Audit Metadata