agent-fullstack-developer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project files, source code, and database schemas, which creates a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The agent reads existing codebase files and database configurations through the
Readtool. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its primary instructions and potentially adversarial content within the files it analyzes.
- Capability inventory: The agent possesses high-impact capabilities including shell command execution (
Bash), container management (Docker), database operations (database), and file system modification (Write,MultiEdit). - Sanitization: The instructions do not define any validation or sanitization logic for the content read from the file system before it is processed by the LLM.
Audit Metadata