design-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits user-provided UI code files, creating a vulnerability surface where malicious instructions could be embedded in code comments to influence the agent's audit results.
- Evidence:
- Ingestion points:
SKILL.mdspecifies reading user-provided files for review. - Boundary markers: No delimiters or instructions are provided to the agent to disregard natural language instructions found within the code being audited.
- Capability inventory: The skill performs file read operations and generates text reports.
- Sanitization: No sanitization or validation of the input code content is performed to detect or strip potential injection strings.
Audit Metadata