hero-generator
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and design guidelines without any accompanying scripts or executable code.
- [SAFE]: No network requests, remote downloads, or credential exposure patterns were detected.
- [PROMPT_INJECTION]: The skill suggests reading project context files (".claude/project-context.md" and ".cursor/project-context.md") to inform design decisions. This presents a surface for indirect prompt injection, but the risk is negligible as the skill lacks any capabilities to perform dangerous actions based on that data.
- Ingestion points: ".claude/project-context.md" and ".cursor/project-context.md" (referenced in SKILL.md).
- Boundary markers: Absent.
- Capability inventory: None (the skill has no access to file writing, network operations, or subprocess execution).
- Sanitization: Absent.
Audit Metadata