solve-workflow

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an extensive workflow that ingests user-provided task descriptions and project source code. This data is processed through stages that include technical analysis and automated execution, creating a surface for indirect prompt injection.
  • Ingestion points: User triggers and problem descriptions (Stage 1), and project files read during analysis (Stage 2).
  • Boundary markers: The skill enforces the use of specific output templates (defined in reference.md) for each stage to maintain structural integrity and delineate agent conclusions.
  • Capability inventory: Stage 6 (Execute) and Stage 7 (Verify) utilize powerful tools including file editing (Edit/Write) and shell command execution (Bash).
  • Sanitization: The skill relies on its multi-stage logic and confirmation gates rather than explicit string sanitization for external content.
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing missing dependencies from the author's repository using npx skills add FuDesign2008/open-skills. This is a vendor-owned resource used for legitimate setup purposes. It also references Figma (figma.com) for design-related verification tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 05:11 AM