project-creator

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill features a documentation generation surface that relies on user-provided descriptions and context. \n- Ingestion points: Untrusted data enters the agent context through user responses during interviews and by reading existing files in the .project/ directory as specified in SKILL.md. \n- Boundary markers: The workflow does not specify the use of delimiters or 'ignore' instructions for the data being ingested. \n- Capability inventory: The agent utilizes file-system write operations across all scripts to generate the .project/ documentation structure. \n- Sanitization: The instructions do not define any filtering, validation, or escaping of the user-provided content before writing it to files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 01:24 AM