prototype
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to integrate prototypes into the host project's task runner (e.g.,
package.jsonscripts,Makefile,justfile,pyproject.toml). This involves the agent modifying configuration files to enable execution of the generated prototype code via standard commands likepnpm runorpython. - [INDIRECT_PROMPT_INJECTION]: The skill designs prototypes that ingest external data, creating potential surfaces for indirect prompt injection.
- Ingestion points: Terminal input/keystrokes for the logic prototype (
LOGIC.md) and URL search parameters (?variant=) for the UI prototype (UI.md). - Boundary markers: None explicitly instructed for the input processing logic.
- Capability inventory: The skill performs file system writes to create the prototype and modifies project configuration files to add run commands.
- Sanitization: The skill does not provide specific instructions for sanitizing or validating the inputs before they mutate the internal state of the prototype.
Audit Metadata