prompt-generator
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and configuration files. It does not contain any executable scripts, binary files, or commands that interact with the network or sensitive system resources.
- [PROMPT_INJECTION]: A deterministic detector flagged the phrase "ignore previous instructions" in
references/prompt-families.md. This is a false positive; the text is part of an educational example illustrating how models can be vulnerable to injection when input delimiters are missing, and it instructs the user to use fences to prevent such issues. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data ("brain dumps"). The risk is mitigated by explicit instructions in the
AI Self-Checksection andreferences/prompt-families.mdto use boundary markers, XML tags, and clear labeling for all untrusted source text to prevent it from being interpreted as instructions. - [DATA_EXFILTRATION]: The skill defines local file paths for saving generated prompts (e.g.,
docs/local/prompts/), but it does not contain hardcoded credentials or any network operations to send data to external servers.
Audit Metadata