36-scroll-progress
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from the project repository and user requirements, which establishes an indirect prompt injection surface.
- Ingestion points: Repository files, dependencies, and user-provided requirements as specified in the implementation contract.
- Boundary markers: The skill lacks explicit delimiters or instructions to ignore instructions embedded in the analyzed repository content.
- Capability inventory: The skill entails typical agent capabilities for code analysis and file system implementation.
- Sanitization: No sanitization or validation of the input source material is requested in the guidelines.
Audit Metadata