inertia
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external application state and user input, which represents a potential attack surface for indirect prompt injection if instructions are embedded in the data.
- Ingestion points: Data enters the agent context through Inertia shared props (
usePageProps) and form state (useForm) as documented inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or clear boundary markers to separate data from system instructions during prompt interpolation.
- Capability inventory: The skill operates in an environment with access to file system tools (
Read,Write,Edit,Grep,Glob) and shell execution (Bash). - Sanitization: No explicit logic is provided for sanitizing or escaping content retrieved from application props or form inputs to prevent prompt injection attacks.
Audit Metadata