onboarding-designer

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill focuses on providing user experience (UX) and design guidance for mobile applications. No malicious scripts, network exfiltration patterns, or unauthorized file system access were detected in the instructions or reference materials.
  • [NO_CODE]: The skill consists entirely of markdown documentation and configuration metadata. It does not include or invoke any external scripts, binaries, or automated toolchains.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided application requirements to generate onboarding plans. While the ingestion of external application details theoretically creates an injection surface, the skill lacks the necessary capabilities (such as tool usage, file writing, or network access) to perform any harmful actions even if an injection were present. 1. Ingestion points: User descriptions of mobile applications provided to the protocol in SKILL.md. 2. Boundary markers: None explicitly defined to separate user input. 3. Capability inventory: The skill has no execution, network, or file-writing capabilities. 4. Sanitization: No specific input sanitization is implemented beyond standard model guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:52 PM