solo-landing-gen
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files which represents a theoretical attack surface for indirect instructions.
- Ingestion points: The skill reads project documentation including
PRD,README.md, andresearch.mdto extract landing page inputs. - Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" prompts when processing these files.
- Capability inventory: The skill has access to
Write,Edit, andBashtools to modify the local environment. - Sanitization: Extracted text is used to fill templates for markdown and source code files without specific validation logic.
- [DYNAMIC_EXECUTION]: The skill generates and writes executable source code files based on project analysis.
- Method: The skill scaffolds actual page components (e.g.,
src/pages/index.astro) when a supported web stack is detected. - Context: This generation is a core intended feature of the skill and follows standard templating patterns for Astro and Next.js applications.
Audit Metadata