replit-prompt
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and reference templates. It does not define any executable scripts or tools or request access to any dangerous capabilities.- [SAFE]: The skill promotes security best practices by explicitly instructing users to store sensitive credentials (like API keys and database URLs) in secure environment variables ('Replit Secrets') rather than hardcoding them in prompts or code.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements to generate structured prompts for the Replit Agent.
- Ingestion points: User requirements gathered during the procedure defined in SKILL.md.
- Boundary markers: The generated output is structured using Markdown headers and code blocks.
- Capability inventory: No shell execution, file system modification, or network tools are present.
- Sanitization: No input sanitization is defined, but the risk is minimal as the skill's output is intended for human review or use in a separate, isolated agent environment.
Audit Metadata