build-table
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via
$ARGUMENTSto define the structure and content of generated Angular components.\n - Ingestion points: User-provided strings in
$ARGUMENTSused to determine table names and data models inSKILL.md.\n - Boundary markers: The skill uses markdown code blocks for component templates but lacks explicit instructions to the agent to disregard instructions potentially embedded within the user data.\n
- Capability inventory: The skill has permission to use the
Writetool to create filesystem artifacts andBashto executenxorngbuild commands.\n - Sanitization: There is no evidence of input validation or sanitization for user-provided identifiers before they are interpolated into the generated TypeScript, HTML, and build scripts.
Audit Metadata