morphing-icons
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon code from the project environment, which presents a risk of indirect prompt injection.
- Ingestion points: The instructions direct the agent to read declared values in the files in scope (SKILL.md).
- Boundary markers: The skill lacks explicit markers or instructions to treat data from reviewed files as untrusted or to ignore embedded instructions.
- Capability inventory: The skill allows the agent to read project files for review and write new components to the file system (SKILL.md).
- Sanitization: No sanitization or validation mechanisms are defined for the input data before it is processed or written back to the project.
Audit Metadata