skills/sickn33/agentic-awesome-skills/full-stack-orchestration-full-stack-feature/Gen Agent Trust Hub
full-stack-orchestration-full-stack-feature
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection where untrusted data could influence the behavior of delegated sub-agents.
- Ingestion points: The
$ARGUMENTSvariable, which represents user-controlled input, is interpolated directly into the task prompts for all sub-agents throughout Phases 1 to 4 inSKILL.md(e.g., database design, backend implementation, and infrastructure setup). - Boundary markers: There are no boundary markers (such as XML tags or triple quotes) or specific instructions provided to the sub-agents to ignore or treat embedded commands within
$ARGUMENTSas data only. - Capability inventory: The skill orchestrates high-privilege operations via the
Tasktool, including database schema modification (sql-pro), infrastructure deployment (deployment-engineer), and security auditing (security-auditor). - Sanitization: The instructions do not define any sanitization, validation, or escaping logic for the content of
$ARGUMENTSbefore it is passed to the execution environment.
Audit Metadata