product-spec
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including prototype evidence from browser tools and existing repository documentation (ingestion points). It mitigates risks by instructing the agent to reject absolute paths or symbolic links that escape the workspace root (boundary markers). While the skill performs file read and write operations within the workspace (capability inventory), it mandates strict target resolution and boundary verification to prevent path traversal attacks (sanitization).
- [SAFE]: The skill follows security best practices by requiring explicit user authorization for file modifications and ensuring that temporary task data is stored in directories ignored by version control to prevent accidental sensitive data leakage.
Audit Metadata