backend-spec
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill processes untrusted input from user arguments and images without explicit boundary markers or sanitization. This could allow maliciously crafted input to influence the agent's behavior.
- Ingestion points: User-provided strings in $ARGUMENTS and local image files referenced in the instructions.
- Boundary markers: None present in the instructions.
- Capability inventory: Image reading and local file writing (telemetry logging).
- Sanitization: No sanitization or validation of the input content is described.
- [SAFE]: Local Telemetry Logging. The skill contains a 'SELF-EVOLUTION TELEMETRY' section that writes execution metadata to ~/.claude/projects/. This interaction is limited to the local filesystem for performance tracking and does not involve network exfiltration or access to sensitive credentials.
Audit Metadata