llm-application-dev-ai-assistant
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates user-provided requirements via the $ARGUMENTS placeholder without isolation or boundary markers.
- Ingestion points: The $ARGUMENTS variable in SKILL.md is used to define requirements for the assistant.
- Boundary markers: There are no delimiters (such as XML tags or triple quotes) or specific instructions to the AI to ignore instructions embedded within the user data.
- Capability inventory: The skill consists only of text instructions and does not have access to subprocesses, file-writing tools, or network operations.
- Sanitization: There is no evidence of input validation or escaping for the user-supplied content.
- [NO_CODE]: The skill is composed entirely of natural language instructions and markdown documentation. It does not contain any executable scripts, binaries, or platform-specific command syntax.
Audit Metadata