correctness-and-error-handling
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Shelltool to executegrepcommands across the application's source code. These commands are used to identify missing error boundaries, unhandledasyncfunctions, and components that lack loading or error states. This execution is scoped to the analysis of the project's source code. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it ingests and processes untrusted data in the form of the user's source code.
- Ingestion points: Reads files from the
src/directory usingRead,Glob, andGreptools (documented in SKILL.md). - Boundary markers: The skill does not implement specific delimiters or instructions to the agent to disregard instructions potentially embedded within the code being analyzed.
- Capability inventory: The skill has access to the
Shell(for grep),Read, andWritetools across the project directory (documented in SKILL.md). - Sanitization: There is no explicit sanitization or validation of the source code content before it is processed or incorporated into the final report.
Audit Metadata