fixing-motion-performance
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided source code files, creating a potential surface for indirect prompt injection if a processed file contains malicious instructions aimed at influencing the agent's auditing logic.
- Ingestion points: Source code content passed via the
/fixing-motion-performance <file>command. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" guards when the agent processes the file content.
- Capability inventory: The skill body focuses on performance auditing and does not explicitly request file-write, network operations, or shell execution capabilities.
- Sanitization: The skill does not define methods for sanitizing or escaping content within the files it reviews.
Audit Metadata