vendure-admin-ui-reviewing

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION] (LOW): The skill possesses an indirect prompt injection surface.
  • Ingestion points: The skill reads external TypeScript and React files (.ts, .tsx) via grep and find commands to perform its audit.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are defined when the agent processes the output of the code searches.
  • Capability inventory: The skill uses find, grep, and xargs to search the local filesystem. It does not perform network operations or write to the filesystem.
  • Sanitization: There is no evidence of sanitization for the code content retrieved before it is presented to the agent for analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 06:40 PM