providing-brand-identity
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides static documentation and configuration for brand identity. No executable scripts, shell commands, or network operations were found.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface for local resource files. 1. Ingestion points: The agent is instructed to read design-tokens.json, tech-stack.md, and voice-tone.md to guide UI generation and copywriting. 2. Boundary markers: No explicit instructions are provided to the agent to delimit or ignore instructions that might be contained within the resource files. 3. Capability inventory: The skill lacks any active capabilities like command execution, file writing, or network tool usage. 4. Sanitization: The skill does not specify any sanitization or validation for the content of the resource files.
Audit Metadata