maui
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions provide an attack surface for indirect prompt injection by requiring the agent to ingest untrusted repository content and perform file modifications and command execution.
- Ingestion points: The agent is instructed to "inspect the repository context" during the workflow (SKILL.md).
- Boundary markers: The instructions lack specific boundary markers or directives to ignore instructions embedded in code comments or data files.
- Capability inventory: The skill allows the agent to edit files and run build, test, lint, or validation commands (SKILL.md frontmatter).
- Sanitization: There are no sanitization steps defined for processing external code or project metadata.
Audit Metadata