react-coding-standards
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest, analyze, and apply corrections to project source code provided by the user. This operation creates a surface for indirect prompt injection, as the agent may process malicious instructions embedded within the source code data.
- Ingestion points: Project source code including selected files, staged changes, and branch contents, as described in the three-phase workflow in
SKILL.md. - Boundary markers: The instructions lack explicit boundary markers or directions for the agent to disregard instructions potentially contained within the analyzed code files.
- Capability inventory: The skill empowers the agent to read file contents, write modifications to the source code to apply "corrections," and execute project tooling such as
yarn lintornpm run lint(SKILL.md). - Sanitization: The skill does not implement any sanitization or escaping of the ingested code content before it is processed by the agent.
Audit Metadata