component-composition
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core workflow involves auditing and refactoring existing source code, which serves as an ingestion point for potentially untrusted data.
- Ingestion points: The skill uses
read_fileandsearch_codeto scan component prop surfaces and implementation logic as described inSKILL.md. - Boundary markers: There are no explicit instructions for the agent to use delimiters or 'ignore' prefixes when processing content from these files.
- Capability inventory: The skill has access to sensitive capabilities including file modification (
write_file,edit_file) and shell command execution (execute_command,run_tests,run_build). - Sanitization: No specific sanitization or validation requirements are defined for the code content before it is processed by the model.
Audit Metadata