i-audit
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external content (code, components, or page designs) provided by the user to perform technical audits.
- Ingestion points: Untrusted data enters the agent context through the
[area]argument and the associated code or design context referenced in theSKILL.mdinstructions for analysis. - Boundary markers: Absent. There are no explicit instructions or delimiters used to isolate the audited content from the agent's core instructions, potentially allowing instructions embedded in the audited code to influence agent behavior.
- Capability inventory: None. The skill does not have access to subprocesses, file-system writes, or network operations; its output is restricted to generating a text-based diagnostic report.
- Sanitization: Absent. The skill does not perform escaping or validation of the external content before processing it for the audit report.
Audit Metadata