frame-flowchart-sticky
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to take user-supplied content and transform it into a design brief, which is then processed by a tool to generate instructions for the agent to follow when editing files.
- Ingestion points: The user's message is treated as the 'brief' for the
prepare_open_design_brieftool as described inSKILL.md. - Boundary markers: No specific delimiters or safety warnings are used to separate user-provided content from the skill's own instructions.
- Capability inventory: The skill allows the agent to use file-editing tools to author content and call registration tools like
register_open_design_artifact. - Sanitization: There is no evidence of sanitization or validation performed on the user-supplied brief before it is passed to the design tools.
Audit Metadata