vertical-slice
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests data from local project files (e.g., CLAUDE.md, game-concept.md, architecture.md) to define building scope and implementation details, which creates a surface for indirect prompt injection. \n
- Ingestion points: Phase 1 and Phase 7 read various documentation files from the workspace to inform game design and tech stack decisions. \n
- Boundary markers: The skill lacks explicit delimiters or instructions for the model to ignore potential malicious commands embedded within the ingested markdown files. \n
- Capability inventory: The skill utilizes the Bash, Write, and Task tools, which provide a significant capability set if an injection were successful. \n
- Sanitization: No validation or sanitization logic is applied to the content of the ingested project files.
Audit Metadata