state-machine
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze local component code, hooks, and queries to map application states and generate a development workbench.
- Ingestion points: Project source code (components and hooks) is ingested by the agent during the scoping and mapping sequence described in
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the ingested source code.
- Capability inventory: The agent has the capability to write new files (React/framework pages, fixtures) and modify project routing configurations across multiple frameworks as detailed in
SKILL.mdandreferences/switcher.md. - Sanitization: No explicit sanitization or validation of the analyzed code is requested before it is used to generate the workbench files.
- [DYNAMIC_EXECUTION]: The skill involves the generation of new functional scripts and web pages derived from project templates and existing code.
- Evidence:
SKILL.md(Step 3) andreferences/switcher.mdinstruct the agent to create new pages (/lab/states/<component>) that import and execute components in a local environment. - [COMMAND_EXECUTION]: The skill requires the agent to perform file system maintenance and run development-related commands.
- Evidence:
SKILL.md(Step 6) directs the agent to delete specific folders, remove lines from route files, and execute type-check or build commands to verify the cleanup process.
Audit Metadata