mobile-monetization
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to 'Do NOT ask the user questions' and 'Investigate the codebase thoroughly', which promotes high autonomy and suppresses human-in-the-loop oversight during the analysis process.
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface:
- Ingestion points: The agent is instructed to scan the entire codebase, dependency manifests, and import statements.
- Boundary markers: The instructions lack delimiters or warnings to ignore embedded instructions found within the processed code files.
- Capability inventory: The skill requires deep file system read access to perform its audit and includes a write operation to
~/.claude/projects/for telemetry logging. - Sanitization: There is no mention of sanitizing or escaping content retrieved from the codebase before the agent processes it.
Audit Metadata