next
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted project data to generate its recommendations.
- Ingestion points: The skill reads
package.json,README,CLAUDE.md, code comments (TODO/FIXME), and documentation files from the local environment. - Boundary markers: There are no explicit instructions or delimiters defined to isolate untrusted file content from the agent's core instructions.
- Capability inventory: No high-risk capabilities such as network operations, file writing, or command execution are requested or described in the skill logic.
- Sanitization: The skill does not implement specific sanitization, filtering, or validation for the content it reads from the codebase.
Audit Metadata