react
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow that ingests untrusted data from the local project environment, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads project guidance files and package manifests (SKILL.md).
- Boundary markers: Absent; there are no specific instructions to ignore malicious commands embedded in these files.
- Capability inventory: The skill has the capability to run project verification commands such as lint, test, and build (SKILL.md).
- Sanitization: Absent; the skill does not specify sanitization or validation routines for the files it reads.
- [COMMAND_EXECUTION]: The workflow includes a step to verify code changes by running project-specific commands (typecheck, lint, test, build, story). While these are standard developer tools, they represent an execution capability that could be targeted by injected instructions.
Audit Metadata