senior-fullstack
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates user-controlled data into its instructions without security boundaries.
- Ingestion points: User-provided tasks enter the prompt through the $ARGUMENTS variable in SKILL.md.
- Boundary markers: Absent. The skill does not use delimiters (like XML tags or triple backticks) to separate user input from its own instructions.
- Capability inventory: The skill's frontmatter does not request access to powerful tools or shell execution capabilities, which limits the potential impact of an injection.
- Sanitization: Absent. There are no instructions provided to the agent to validate or ignore instructions embedded within the user arguments.
Audit Metadata