landing-page-design
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshCLI to execute various tasks including image generation and data retrieval. Operations are restricted to theinfshtool via Bash as defined in the frontmatter. - [EXTERNAL_DOWNLOADS]: The skill references external installation documentation and suggests adding additional modules from the
inference-shrepository on GitHub. These resources are provided by the vendor to extend the skill's capabilities. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its use of the
exa/answertool for competitor research. - Ingestion points: External content retrieved from search queries in
SKILL.md. - Boundary markers: Absent; there are no instructions to the agent to ignore or delimit embedded instructions in the search results.
- Capability inventory: The agent has the ability to execute shell commands via the
infshtool. - Sanitization: No sanitization or filtering of the external search output is performed before it is processed by the agent.
Audit Metadata