top-banner-generator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external project files (
.claude/project-context.mdor.cursor/project-context.md) during its initial assessment phase to inform the banner generation process. This creates a surface where malicious instructions placed in those files could influence the agent's behavior. - Ingestion points: Instructions in
SKILL.mddirect the agent to read external context files. - Boundary markers: Absent; there are no instructions to delimit or specifically ignore commands embedded within the project context files.
- Capability inventory: The agent is granted the ability to read project metadata and file contents from the local environment.
- Sanitization: Absent; the skill does not specify any validation, filtering, or sanitization for the content loaded from these files.
Audit Metadata