basic-custom-app-build
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon external project artifacts such as manifest files and dataset schemas, creating a surface where malicious content in these files could influence agent behavior.
- Ingestion points: The skill reads project metadata from
manifest.json(Phase 1) and retrieves external schema information for datasets (Phase 3). - Boundary markers: No specific delimiters or instructions are provided to the agent to treat content within project files or dataset schemas as untrusted data.
- Capability inventory: The skill includes capabilities for file system operations, execution of build commands (
npm run build), and deployment tasks (domo publish). - Sanitization: There is no evidence of sanitization or validation logic for the content retrieved from the
manifest.jsonor dataset API calls before it is used to influence code generation or tool execution.
Audit Metadata