redesign-existing-projects

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends using https://picsum.photos for placeholder background images. This is a well-known service commonly used in web development for prototyping.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its core operational workflow.
  • Ingestion points: The agent is instructed to read the project's codebase during the 'Scan' phase to identify current frameworks and styles (SKILL.md).
  • Boundary markers: No explicit delimiters or boundary markers are defined to isolate the ingested codebase content from the agent's instructions.
  • Capability inventory: The agent has the capability to write to and modify the codebase during the 'Fix' phase (SKILL.md).
  • Sanitization: No specific sanitization or validation of the codebase content is provided or instructed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 08:26 PM
Security Audit — agent-trust-hub — redesign-existing-projects