miro-code-explain-on-board
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a well-defined and logical workflow for repository analysis and visualization on Miro boards without any identified security issues. All tools used align with the skill's stated purpose and vendor origin.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it analyzes untrusted repository content during its initial workflow step. The capability inventory includes writing to external boards via 'diagram_create_mermaid' and 'doc_create'. However, the risk is mitigated by explicit instructions to ground all diagrams in known repository artifacts and the enforcement of mandatory pre-compilation audits to ensure output integrity.
Audit Metadata