prototype
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in SKILL.md guide the agent to provide and execute commands through established project task runners, such as php artisan, composer, pnpm, or python, to launch the created prototypes.- [INDIRECT_PROMPT_INJECTION]: The prototyping workflow involves reading untrusted data from user prompts and project files to generate new executable code, presenting an injection surface.
- Ingestion points: Data is ingested from the user's prompt and the surrounding source code to define the prototype's logic and structure (SKILL.md).
- Boundary markers: The instructions lack requirements for using boundary markers or 'ignore' instructions when processing ingested content.
- Capability inventory: The skill has the capability to write files (prototype artifacts) and execute shell commands via the project's task runner interface.
- Sanitization: There are no specified sanitization or validation processes for data before it is interpolated into the generated scripts or command arguments.- [DYNAMIC_EXECUTION]: The skill is centered around the dynamic generation of scripts (HTML, JavaScript, PHP, Python) that are intended to be executed immediately to demonstrate functionality (LOGIC.md, UI.md).
Audit Metadata