fixing-motion-performance

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill is designed to ingest and analyze external code files provided by the user to identify performance violations. This creates a surface where instructions embedded within the analyzed code could potentially influence the agent's behavior.
  • Ingestion points: External source files processed via the /fixing-motion-performance <file> command pattern described in the instructions.
  • Boundary markers: Absent. The skill instructions do not provide delimiters or specific 'ignore' directives to separate analyzed code from the agent's operational instructions.
  • Capability inventory: The skill specifies the use of Read, Grep, and Bash tools in its frontmatter configuration.
  • Sanitization: Absent. There are no instructions for sanitizing or escaping the content of the analyzed files before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:53 PM
Security Audit — agent-trust-hub — fixing-motion-performance