n-plus-one-killer
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify Ruby on Rails source code provided by users, creating a surface for indirect prompt injection if malicious instructions are embedded in the analyzed code.
- Ingestion points: The skill ingests user-provided controller logic, view templates, and database performance descriptions (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to separate user-provided code from the agent's operating instructions.
- Capability inventory: The skill encourages the agent to write and modify Ruby files, generate database migrations, and create configuration scripts (scripts/bullet-config.rb).
- Sanitization: The skill does not define specific validation or sanitization protocols for external code snippets before they are processed or interpolated into the agent's context.
Audit Metadata