teach-impeccable
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it reads untrusted data from the codebase (such as the README, component source code, and assets) and synthesizes that data into project configuration files like CLAUDE.md. This could allow malicious instructions hidden in the project's source or documentation to be promoted to persistent instructions for the agent.
- Ingestion points: Readme, package.json, source code components, and brand assets as specified in the SKILL.md exploration step.
- Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore potential commands embedded within the gathered context.
- Capability inventory: The skill utilizes tool calls for user interaction and has the capability to read project files and write to project root configuration files (.impeccable.md and CLAUDE.md).
- Sanitization: No content sanitization or validation is performed on the data extracted from the codebase before it is persisted into configuration files.
Audit Metadata