features-audit
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes untrusted project source code.\n
- Ingestion points: Project source code files (SKILL.md).\n
- Boundary markers: Absent; there are no instructions provided to the agent to treat code content as data only or to ignore embedded instructions.\n
- Capability inventory: File system read access (to study code) and file system write access (to create/update FEATURES.md).\n
- Sanitization: Absent; the skill does not specify any sanitization, escaping, or validation of the content it extracts from the audited code.
Audit Metadata