form-validation-with-zod
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile defines a 'Memory Protocol' that instructs the agent to execute a shell command (cat .claude/context/memory/learnings.md) before starting tasks to maintain context. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection due to its data processing requirements.
- Ingestion points: The agent is instructed to read content from
.claude/context/memory/learnings.mdand processes all TypeScript (.ts) files in the project workspace. - Boundary markers: No explicit delimiters or boundary instructions are provided to help the agent distinguish between its core instructions and potentially malicious instructions embedded within the memory file or source code comments.
- Capability inventory: The skill utilizes
Read,Write, andEdittools, and executes thecatcommand to read file contents. - Sanitization: There is no evidence of sanitization or filtering of the content ingested from the external files before it is processed by the model.
Audit Metadata