relay-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill fetches documentation and configuration guidelines from the official Relay repository on GitHub, which is managed by a trusted organization.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read, analyze, and modify React components and GraphQL files, creating a potential surface for instructions embedded in source code to influence agent behavior.
- Ingestion points: The skill processes file contents including
graphqltags, component logic, and generated artifacts in__generated__/*.graphql. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions that may be embedded within the code being analyzed.
- Capability inventory: The agent is empowered to perform code modification, explanation, and debugging based on the processed data.
- Sanitization: There is no mention of sanitizing or validating the contents of processed files to prevent the execution of instructions embedded in data.
Audit Metadata