vibecode-dashboard
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a multi-step workflow where data provided by the user is used to generate a project blueprint and final code pack.\n
- Ingestion points: User-provided 'CONTEXT' in Step 2 (metrics, user roles, management goals) is incorporated into the prompts for Steps 3, 4, and 5.\n
- Boundary markers: The skill lacks explicit delimiters or instructions to the agent to ignore any embedded directives or code within the user's data context.\n
- Capability inventory: The skill provides instructions for the agent to generate functional React/Next.js code components, file structures, and styling logic in Step 5 (CODER PACK).\n
- Sanitization: There are no explicit validation or sanitization steps for the user-supplied data, leaving the agent to rely on its default safety filters when generating the resulting code.
Audit Metadata