blueprint-research
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs to drive its research and orchestration logic.
- Ingestion points: Input parameters
feature_descriptionandtech_stackdefined in theInputsection ofSKILL.md. - Boundary markers: Prompts for sub-agents (e.g.,
{feature_description}or{feature}) do not include specific delimiters to isolate user input from the agent's instructions. - Capability inventory: The skill triggers various research agents (
git-researcher,repo-analyst,docs-researcher, etc.) and performs dynamic skill injection. - Sanitization: No explicit validation or escaping of the user-provided feature description is performed before it is passed to subsequent agents.
- [DYNAMIC_EXECUTION]: The skill implements a mechanism to load and apply additional logic at runtime.
- Evidence: Step 5 of the workflow iterates through
coding_styles(retrieved by the toolbox-resolver) and executes them usingSkill(skill: skill). This allows the agent to dynamically adopt specific coding standards based on the project context.
Audit Metadata