appstore-info-generator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user-supplied data (App Name, Purpose, Features) to generate content.
- Ingestion points: User-provided inputs gathered during the initial workflow steps defined in SKILL.md.
- Boundary markers: The skill uses markdown code blocks to structure the output, which provides basic delimitation but does not strictly prevent instruction injection.
- Capability inventory: The skill instructs the agent to write files to the local filesystem ("Save to: docs/appstore-info.md").
- Sanitization: The instructions do not specify any validation or sanitization of the user-provided strings before they are interpolated into the generated documentation.
Audit Metadata