image-optimization-rules
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill contains a 'Memory Protocol' section that explicitly instructs the agent to execute a bash command (
cat .claude/context/memory/learnings.md). While the command is restricted to a specific internal path for context management, it introduces a dependency on command execution capabilities. - [PROMPT_INJECTION] (LOW): The skill is vulnerable to indirect prompt injection (Category 8) because it processes external data.
- Ingestion points: Files matching
components/**/*.{js,jsx,ts,tsx}. - Boundary markers: Absent; there are no instructions for the agent to distinguish between code and potential malicious instructions embedded within that code.
- Capability inventory: The skill utilizes
Read,Write, andEdittools, and demonstrates command execution (cat). - Sanitization: No sanitization or validation logic is present to filter or escape instructions found in the ingested code files.
Audit Metadata