sveltekit-progressive-architecture
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of processing external data.
- Ingestion points: The skill reads
.svelte,.ts, andpackage.jsonfiles from the local filesystem to perform tasks like code review, refactoring, and implementation. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions embedded within the source code comments or strings of the files it analyzes.
- Capability inventory: The skill is granted
Write,Edit, andBashcapabilities, allowing it to modify the filesystem based on its analysis of potentially untrusted input. - Sanitization: There is no mention of sanitization or validation of the content of the files before they are processed by the LLM.
Audit Metadata