redesign-existing-projects
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and interpret the content of an existing codebase during the 'Scan' and 'Diagnose' phases. This creates a surface where malicious instructions hidden in the code (e.g., in comments or text content) could influence the agent's behavior during the 'Fix' stage.
- Ingestion points: Reading the project codebase, framework files, and styling methods (SKILL.md, Step 1).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the codebase being audited.
- Capability inventory: The agent has the capability to modify the local filesystem ('Fix' step) and add or modify project dependencies.
- Sanitization: There are no explicit instructions to sanitize or validate the content of the codebase before processing it.
Audit Metadata