emergent-project-design-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data which presents a surface for indirect prompt injection.
- Ingestion points: User input from the fields {{children_interest}} and {{teacher_observations}} is interpolated into the expert prompt in SKILL.md.
- Boundary markers: The prompt does not utilize delimiters or specific instructions to treat user data as non-executable text.
- Capability inventory: No sensitive capabilities such as file system writes, network requests, or subprocess execution are present in the skill.
- Sanitization: The inputs are not validated or sanitized before interpolation.
Audit Metadata