css-module-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection because it processes untrusted user input while maintaining access to high-privilege tools.
- Ingestion points: User-provided requests triggered by phrases like "css module generator" or "css" (SKILL.md).
- Boundary markers: None present; the instructions do not include delimiters or warnings to ignore instructions embedded within the user data.
- Capability inventory: The skill is configured with access to
Bash(cmd:*),Write,Edit,Read, andGreptools. - Sanitization: There are no instructions provided to validate, sanitize, or escape the content of the user request before processing it with the allowed tools.
Audit Metadata