impeccable
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-controlled content from
PRODUCT.md,DESIGN.md, and project source files into the agent's context to guide design decisions. - Ingestion points:
scripts/load-context.mjsreads product and design metadata.scripts/live-wrap.mjsandscripts/live-accept.mjsread and modify project source files. - Boundary markers: The skill uses markers like
<!-- impeccable-variants-start -->to identify its own blocks but does not employ specific 'ignore embedded instructions' delimiters for the user-supplied strategic content inPRODUCT.md. - Capability inventory: The skill possesses powerful capabilities including subprocess execution (
execSync), file system modification (writeFileSync,rmSync), and local network server creation. - Sanitization: The skill processes markdown and code strings using standard search-and-replace and regex patterns without specialized sanitization for embedded natural language instructions.
- [COMMAND_EXECUTION]: The skill relies on several utility scripts to automate design tasks and environment management.
- Evidence:
scripts/live-poll.mjs,scripts/live.mjs, andscripts/pin.mjsutilizeexecSyncandspawnto run Node.js helpers andnpxcommands. This is used for creating variant wrappers, injecting scripts into project files, and creating symlink shortcuts for the agent. - [EXTERNAL_DOWNLOADS]: The skill references well-known external services for design assets and package management.
- Evidence:
reference/brand.mdprovides instructions for fetching stock imagery via Unsplash templates. The skill's commands may also triggernpxpackage downloads from the official npm registry.
Audit Metadata