miniapp-user-facing-copy-trim
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing codebase content which acts as untrusted data input to the agent.
- Ingestion points: The agent reads page labels, subtitles, empty states, and status text from the target codebase using
Read,Glob, andGreptools (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or directives to ignore instructions that might be embedded within the copy being processed.
- Capability inventory: The skill is granted access to
Bash,Write, andEdittools, which provide the ability to execute commands and modify the filesystem (SKILL.md). - Sanitization: There are no explicit sanitization or validation steps mentioned for the ingested text before it is processed by the agent's logic.
Audit Metadata