cursor-no-comments
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code provided via files or git diffs, which serves as a potential vector for indirect prompt injection.\n
- Ingestion points: As per SKILL.md, the agent reads the "caller's files or diff" or the "current diff against the base branch".\n
- Boundary markers: The instructions do not define explicit delimiters or instructions to ignore potential commands embedded within the processed code comments or strings.\n
- Capability inventory: The skill has the capability to modify the filesystem, including deleting code paths, dropping parameters, and implementing architectural changes (SKILL.md Step 3 and Step 4).\n
- Sanitization: No sanitization, escaping, or validation of the ingested code content is described in the workflow.
Audit Metadata