vertical-site-conventions
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation and reference files defining design conventions and checklists. It does not contain any executable scripts, binary files, or configuration for software package managers.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and act upon data ("experience bar") produced by the 'competitor-experience-audit' skill.
- Ingestion points: Vertical-specific patterns, gaps, and recurring conventions are ingested from the output of external audit skills as described in the SKILL.md workflow and the 'references/shape-conventions-checklist.md' synthesis section.
- Boundary markers: There are no explicit delimiters or 'ignore embedded instructions' warnings specified for the interpolation of the audit data into the composition notes.
- Capability inventory: The skill's primary capability is writing a markdown specification file ('composition-[site-shape]-[brand-slug].md'). It lacks network access, file system write access outside the project root, and the ability to execute shell commands.
- Sanitization: The instructions do not include steps for sanitizing or validating the content of the ingested audit data before it is used to generate the composition notes.
Audit Metadata