grill-visual-hierarchy
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted external project data, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: In
SKILL.md, the instructions require the agent to read project instructions, glossaries, Architecture Decision Records (ADRs), design references, and inspect rendered interfaces or codebase components. - Boundary markers: The skill does not provide explicit instructions to use delimiters or guidelines for the agent to ignore potentially malicious instructions embedded within the analyzed project files.
- Capability inventory: The skill uses the agent's inspection capabilities to read local files and environment data. However, it does not include instructions for network operations, shell execution, or file writing in the provided files.
- Sanitization: There are no documented steps for sanitizing, validating, or filtering the content retrieved from the external project sources.
Audit Metadata