qstack-prove-it-works
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process and verify artifacts and inputs from the user's workspace, creating an attack surface where these inputs could contain instructions for the agent.
- Ingestion points: The skill ingests artifacts, inputs, and communication paths (SKILL.md).
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions embedded in the artifacts.
- Capability inventory: The skill utilizes file reading, artifact execution, and process liveness monitoring (SKILL.md).
- Sanitization: No sanitization or filtering of the processed content is specified.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to "Run the actual artifact" to verify feature behavior, which involves executing code found within the project context.
Audit Metadata