product-inspiration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses
WebSearch,WebFetch, andmcp__tavily__tavily_searchto gather design patterns and implementation details from the public web. This data is subsequently used by the agent to generate and implement UI components directly into the local project structure. - Ingestion points: Research phase in Phase 2 utilizing external search and fetching tools in
SKILL.md. - Boundary markers: Absent. The instructions do not define delimiters or specific safety instructions to prevent the agent from following instructions embedded in the retrieved web content.
- Capability inventory: The skill has
BashandWritecapabilities, allowing it to execute code, create directories (_trials/), and modify source code (src/). - Sanitization: Absent. The skill does not specify any validation or filtering of the gathered content before it is processed by the LLM for code generation.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform filesystem management, including moving generated components into the productionsrc/directory and deleting or archiving temporary files. - Evidence: Phase 8.1 (
cp -r _trials/... src/components/) and Phase 8.2 (mv,mkdir,rm) inSKILL.mddescribe using shell commands to manage the project structure based on implementation results.
Audit Metadata