prototype
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided logic or UI questions to generate and execute code. This creates a potential surface for indirect instructions if the input data is untrusted.
- Ingestion points: User-provided question or decision descriptions in SKILL.md.
- Boundary markers: No explicit delimiters or safety instructions are defined to wrap the input data.
- Capability inventory: Generates and executes "runnable experiments" using the host project's local tools.
- Sanitization: No explicit sanitization or validation of the input query is described.
- [DYNAMIC_EXECUTION]: The skill's core functionality involves generating and executing code for prototyping purposes, which is its intended and stated behavior.
Audit Metadata