microsim-standardization
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled project files, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads content from
index.md,metadata.json, andmain.htmlwithin user-specified MicroSim directories. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are implemented when the agent reads or interpolates simulation data.
- Capability inventory: The skill is limited to file system writes via
TodoWriteand user interaction viaAskUserQuestion, with no access to shell execution or network exfiltration. - Sanitization: There is no evidence of sanitization or filtering of external content before it is processed or written to new files.
Audit Metadata