to-mockup
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data such as PRDs, planning conversations, and ClickUp tasks to influence code generation.
- Ingestion points: External context, PRDs, planning decisions, and ClickUp tasks are explicitly listed as starting points in the
Scope the designsection. - Boundary markers: The instructions lack specific delimiters or warnings for the agent to ignore potentially malicious instructions embedded within these external documents.
- Capability inventory: The skill has significant capabilities including writing application code to worktrees, performing git operations (publishing branches to GitLab), and interacting with ClickUp APIs to index links.
- Sanitization: There are no mentioned processes for sanitizing or validating the content retrieved from external planning documents before it is used to generate code.
Audit Metadata