charted-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external file specified by the user.
- Ingestion points: The content of the file at
designDocPath($ARGUMENTS[0]) is interpolated directly into the task instructions for the agent. - Boundary markers: There are no explicit delimiters or instructions telling the agent to ignore any malicious prompts that might be embedded within the design document.
- Capability inventory: The skill allows the agent to write new code, components, and tests to the file system.
- Sanitization: The skill does not perform any validation or sanitization of the content found within the design document before processing it.
Audit Metadata