onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading from external project files, which establishes an attack surface for indirect prompt injection where malicious data in those files could influence agent behavior.\n
- Ingestion points: The skill reads from
PROJECT_SETTINGS.md,quality/FINDINGS.md, and the author profile (SKILL.md).\n - Boundary markers: No delimiters or specific instructions to isolate or ignore embedded instructions within these files are present.\n
- Capability inventory: The skill has the ability to coordinate with tools for project scaffolding, manuscript importing, planning, and scene writing (SKILL.md).\n
- Sanitization: There are no instructions for sanitizing or validating the content retrieved from these files.\n- [NO_CODE]: This skill consists entirely of markdown instructions and does not include any accompanying scripts, binaries, or source code files.
Audit Metadata