enhance-prompt
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Stitch Effective Prompting Guide at
https://stitch.withgoogle.com/docs/learn/prompting/. This refers to an official documentation page from a well-known service (Google). - [INDIRECT_PROMPT_INJECTION]: The skill ingest untrusted user input (vague UI ideas) and local project files (
DESIGN.md) to generate structured prompts for a downstream system (Stitch). - Ingestion points: User input prompts and the content of
DESIGN.md(read from the local environment). - Boundary markers: The skill lacks explicit boundary markers or instructions to the LLM to ignore potentially malicious embedded commands within the design content or user input.
- Capability inventory: The skill utilizes
ReadandWritetools to access project files and potentially output the results to local files likenext-prompt.md. - Sanitization: No specific sanitization or filtering logic is present to prevent the propagation of instructions hidden within the UI ideas into the final generated prompt.
Audit Metadata