about-page-generator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it instructs the agent to ingest content from external, user-controlled files.\n
- Ingestion points: The skill reads
.claude/project-context.mdand.cursor/project-context.mdto extract brand and company information.\n - Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between data and potential commands within these context files.\n
- Capability inventory: The skill primarily generates text-based output, outlines, and metadata. No high-risk capabilities like file system modifications, network exfiltration, or shell command execution were identified in the skill instructions.\n
- Sanitization: The skill lacks mechanisms to sanitize or validate the content retrieved from the project context files.
Audit Metadata