harden
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external UI code provided via
$ARGUMENTSto identify and fix missing production-readiness features. If this code contains embedded malicious instructions, the agent might follow them while performing its 'hardening' pass. - Ingestion points: UI code and component content located at the path or description provided in
$ARGUMENTS. - Boundary markers: Absent. The instructions do not specify any delimiters or safety warnings to the agent regarding instructions that might be embedded within the files it is analyzing.
- Capability inventory: The skill explicitly directs the agent to 'edit the code to fix what's missing', granting the agent file-write and modification capabilities over the workspace.
- Sanitization: Absent. There are no instructions to sanitize or validate the external content before it is processed or used to generate code modifications.
Audit Metadata