multi-platform-apps-multi-platform
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates untrusted user input into prompts for specialized sub-agents and chains their outputs without adequate sanitization or boundary markers.
- Ingestion points: The
$ARGUMENTSvariable inSKILL.mdcaptures initial feature specifications which are directly interpolated into the first task prompt for the backend-architect. - Boundary markers: Instructions in
SKILL.mddo not utilize delimiters (such as triple backticks) or specific safety warnings to isolate user input from system instructions. - Capability inventory: The skill uses the
Tasktool to invoke specialized agents (includingbackend-architect,ios-developer, andunit-testing::test-automator) acrossSKILL.mdto generate code and documentation. - Sanitization: There is no evidence of validation or filtering for input passed through
$ARGUMENTSin the providedSKILL.mdfile.
Audit Metadata