tauri-svelte-ui-components
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes untrusted source code files from the project. \n
- Ingestion points: Source files matching the glob
src/components/**/*.{svelte,ts,tsx}defined inSKILL.md. \n - Boundary markers: The instructions lack delimiters or explicit warnings to the agent to disregard instructions embedded within the processed data. \n
- Capability inventory: The agent is equipped with
Read,Write, andEdittools, and is instructed to execute shell commands. \n - Sanitization: No content validation, escaping, or sanitization protocols are mentioned for the ingested files. \n- [COMMAND_EXECUTION]: The
SKILL.mdfile contains a 'Memory Protocol' that directs the agent to execute shell commands, specificallycat .claude/context/memory/learnings.md, to retrieve context from previous sessions.
Audit Metadata