web-storage
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of scripts, client components, and bundles provided for review. Ingestion points: User-provided source code and runtime behavior data described in SKILL.md. Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the analyzed code. Capability inventory: The agent uses reasoning and file-reading capabilities to perform the review; no additional high-risk tools are introduced. Sanitization: No specific filtering or sanitization of the input code is performed by the skill instructions.
Audit Metadata