prop-drill
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes source code from the user's project to trace prop origins and drilling paths. This creates a surface for indirect prompt injection if malicious instructions are embedded within the codebase being analyzed (e.g., in code comments or large string literals).
- Ingestion points: Phased search and read operations on
*.tsand*.tsxfiles within the local project directory (SKILL.md, Phases 1-3). - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the file content being processed.
- Capability inventory: The skill utilizes file reading (
Read), pattern matching (Grep), shell command execution (viaBashcompatibility mapping), and external search capabilities (viaWebSearchandexaMCP mappings). - Sanitization: The skill does not perform sanitization or validation of the code content before analysis.
Audit Metadata