lazy-loading-implementer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input and possesses high-privilege capabilities, creating a potential surface for indirect prompt injection attacks. 1. Ingestion points: The skill ingests data via user requests triggered by keywords like 'lazy loading implementer' in SKILL.md. 2. Boundary markers: There are no explicit delimiters or instructions to treat embedded user content as data rather than instructions. 3. Capability inventory: The skill has access to sensitive tools including Bash(cmd:*), Write, and Edit as listed in the frontmatter. 4. Sanitization: The instructions lack guidance for the agent to sanitize, escape, or validate external input before interpolation into commands or file operations.
Audit Metadata