linktree-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions emphasize secure development practices, specifically prohibiting the use of production credentials, session data, or real user information. It mandates the use of synthetic fixtures and provides clear error-handling steps to quarantine real personal data if found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local fixtures and external partner documentation, which represents an indirect injection surface. However, the risk is mitigated by explicit sanitization requirements and the enforcement of a synthetic-only development loop.
- Ingestion points: Repository specifications, fixtures, and documentation are accessed via
Read,Glob, andGrepas defined inSKILL.md. - Boundary markers: The skill requires labeling every modeled field with its authority source to maintain data provenance.
- Capability inventory: Tool use is restricted to file system inspection, local file editing, and fetching official documentation via
WebFetch. - Sanitization: The 'Error Handling' section explicitly requires that real personal data be replaced with synthetic values and the original data quarantined.
Audit Metadata