teach-impeccable
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the project codebase and user responses, then writes the synthesized content to a configuration file.
- Ingestion points: The skill reads project files (README, components, package.json, brand assets) in Step 1 and accepts user input via the
{{ask_instruction}}placeholder in Step 2. - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions that might be embedded within the project files being scanned.
- Capability inventory: The skill possesses the capability to write or update a file at the path specified by
{{config_file}}in the project root. - Sanitization: There is no evidence of sanitization, escaping, or validation of the data retrieved from the codebase before it is interpolated into the configuration file output.
Audit Metadata