design-an-interface
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill defines a sub-agent workflow vulnerable to indirect prompt injection.
- Ingestion points: User-provided inputs for [module description] and [gathered requirements] are interpolated into the sub-agent prompt template in
SKILL.md. - Boundary markers: Absent; the template lacks delimiters or explicit instructions to distinguish user data from agent instructions.
- Capability inventory: The skill employs the
Tasktool to spawn sub-agents that process these inputs. - Sanitization: No input validation or escaping is present for the requirement strings.\n- [NO_CODE]: This skill consists entirely of markdown instructions and does not contain any executable scripts or configuration files.
Audit Metadata