product-lens
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is composed of instructional markdown for product diagnostics and does not include any executable code, scripts, or obfuscated content.
- [COMMAND_EXECUTION]: Mode 3 instructions describe a 'User Journey Audit' process that involves cloning and installing software; this is a functional requirement for software testing and does not include specific malicious commands or untrusted sources.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads untrusted project files while performing its audit capabilities.
- Ingestion points: README.md, CLAUDE.md, package.json, and git commits (SKILL.md).
- Boundary markers: No delimiters or specific instructions to ignore embedded content are provided for the agent.
- Capability inventory: Shell access for cloning repositories and installing software for audits.
- Sanitization: No evidence of validation or filtering for the content of the analyzed files.
Audit Metadata