timing-functions
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and classify UI code from project files, which creates an inherent attack surface for malicious instructions embedded in the audited data.
- Ingestion points: Files in the project scope as referenced in the classification instructions in SKILL.md.
- Boundary markers: No explicit markers or warnings are provided to the agent to ignore instructions within the audited code.
- Capability inventory: The skill is restricted to analysis and reporting; it does not invoke tools for network access, file modification, or command execution.
- Sanitization: No procedures for sanitizing or escaping the content of the analyzed files are defined.
- [NO_CODE]: The skill does not provide any executable scripts, binaries, or automated installation processes, relying entirely on markdown-based instructions for the agent's behavior.
Audit Metadata