typescript-strict
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and configuration files, which presents a surface for indirect prompt injection attacks.\n
- Ingestion points: Project source files (e.g.,
src/**/*) and configuration files (e.g.,tsconfig.json) are accessed via theReadandGreptools.\n - Boundary markers: The provided instructions and templates do not implement specific delimiters or instructions to ignore potentially malicious instructions embedded within the code being analyzed.\n
- Capability inventory: The skill utilizes tools capable of shell execution (
Bash), file modification (Write,Edit), and network access (WebFetch,WebSearch).\n - Sanitization: The skill lacks explicit sanitization or validation logic for the content it ingests from the filesystem before processing it.
Audit Metadata