express-route-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by generating code and configurations based on untrusted user input.
- Ingestion points: User requests containing keywords like 'express', 'express generator', or 'express route generator' (found in SKILL.md).
- Boundary markers: The skill lacks explicit boundary markers or instructions to the agent to disregard instructions embedded within user data.
- Capability inventory: The skill is configured with broad tool access including Bash, Read, Write, Edit, and Grep in its SKILL.md metadata.
- Sanitization: No input sanitization or output validation mechanisms are defined to mitigate malicious payload generation.
Audit Metadata