design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository to update documentation, creating a surface for indirect prompt injection.
- Ingestion points: The workflow in SKILL.md instructs the agent to inspect README files, project specifications, GitHub/GitLab issues, Storybook/Playwright baselines, and other frontend assets.
- Boundary markers: There are no instructions for the agent to use delimiters or ignore potential commands embedded within the analyzed project files.
- Capability inventory: The skill performs file system reads and writes to the DESIGN.md file but does not utilize network or arbitrary code execution tools.
- Sanitization: No sanitization or validation of the ingested text is performed before it is used to populate the design template.
Audit Metadata