styleguide
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or data exfiltration patterns were detected in the skill's code or metadata.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection vulnerability surface as it processes external data through user-provided arguments.\n
- Ingestion points: User-provided project names and descriptions are ingested through the
$ARGUMENTSvariable inSKILL.md.\n - Boundary markers: Absent; user input is integrated directly into the prompt context without delimiters to prevent instruction override.\n
- Capability inventory: The skill utilizes
Read,Grep,Glob,Edit,Write, andBashtools as specified inSKILL.md.\n - Sanitization: Absent; the skill relies on the underlying model's safety guardrails to process project-specific input.
Audit Metadata