site-md
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project descriptions or requirement briefs, creating an attack surface for indirect prompt injection where malicious instructions embedded in documents could influence the agent's output.
- Ingestion points: The skill is instructed to "Read input requirements" from project description documents or text inputs in the SKILL.md Action Plan.
- Boundary markers: There are no explicit instructions to use delimiters or "ignore embedded instructions" warnings when processing external data.
- Capability inventory: The skill has the ability to use Read, Write, and web_fetch tools, specifically targeting the creation of the .stitch/SITE.md file.
- Sanitization: No sanitization, validation, or filtering mechanisms are defined for the data extracted from requirements briefs.
Audit Metadata