validating-production-readiness
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project source code and build artifacts (via grep, glob, and read operations) and possesses the capability to write modifications back to the filesystem during its remediation phase. This creates a surface where malicious instructions hidden in project files (e.g., within comments or configuration strings) could potentially influence the agent's logic during the audit or when generating code fixes.
- Ingestion points: The skill reads various project files including
projects/api/src/config.env.ts,.gitignore,package.json,Dockerfile, and build outputs inprojects/app/.output/. - Boundary markers: No explicit markers or instructions are provided to the agent to ignore or delimit embedded instructions within the files it inspects.
- Capability inventory: The skill utilizes file reading, pattern matching (grep), and file writing to apply automated fixes to project code (e.g., adding NestJS decorators, updating Dockerfiles, or modifying bootstrap logic).
- Sanitization: There is no evidence of sanitization or escaping of the external content before the agent processes it to determine the readiness verdict or perform remediation.
Audit Metadata