presentation
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests technical specifications from markdown files and renders them using React's
dangerouslySetInnerHTMLwithout sanitization. Ingestion points: Technical specification markdown files intech-specs/<slug>/(processed inSKILL.mdandbase/scripts/manifest.mjs). Boundary markers: Absent for the markdown rendering process. Capability inventory: The skill generates source code, performs file system writes, and executes build and development scripts (vite build,pnpm dev). Sanitization: TheMarkdownandMermaidcomponents inbase/src/content/markdown.tsxandbase/src/content/mermaid.tsxpass content directly todangerouslySetInnerHTMLwithout filtering script or HTML tags.
Audit Metadata