vibe-reengineer
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted prototype code and audits active applications, creating an attack surface for indirect prompt injection where malicious instructions in the source code could influence agent behavior.\n
- Ingestion points: The skill is triggered to clean up prototypes and audit applications running at
localhost:3000, ingesting both code files and runtime telemetry.\n - Boundary markers: There are no instructions provided to the agent to treat processed code as untrusted or to ignore instructions embedded within the source files.\n
- Capability inventory: The skill utilizes tools to extract domain models to the filesystem and port routes, providing a significant capability surface if the agent is manipulated.\n
- Sanitization: The instructions do not define any sanitization or validation steps for the content of the prototype files being reengineered.
Audit Metadata