d2-03-search-delete-page
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a UI component that ingests data from an external service (
<entity>Service.getAll()) and renders it within an Angular template. - Ingestion points: Data is retrieved via the entity service in
SKILL.mdand stored in a signal. - Boundary markers: None explicitly defined for the rendered user data.
- Capability inventory: The component allows viewing data, navigating to edit/add routes, and calling a delete method on the service. No high-risk capabilities like shell execution or direct file system writes are present.
- Sanitization: The template utilizes standard Angular interpolation (
{{ item.name }}), which provides automatic HTML escaping to protect against basic injection attacks. - [COMMAND_EXECUTION]: The instructions include a standard
docker compose up -d --buildcommand. This is used for redeploying the application environment as described in the skill's purpose and does not involve unsafe interpolation of user-supplied arguments.
Audit Metadata