failure-path-audit
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a focused utility for improving application robustness by identifying unhandled failure scenarios like empty states, timeouts, and validation errors.
- [COMMAND_EXECUTION]: The skill instructs the agent to create a specific directory structure and write an audit report to
docs/hci/failure-path-audit.md. This is a standard file system operation for documentation tools. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data through the
$ARGUMENTSparameter and codebase analysis. - Ingestion points: User-provided scope in
SKILL.md($ARGUMENTS) and the project's own source code. - Boundary markers: None identified; the skill does not use specific delimiters to isolate analyzed content from instructions.
- Capability inventory: File system write operations (creating directories and markdown files).
- Sanitization: No explicit sanitization or validation of the ingested codebase content or arguments is mentioned.
Audit Metadata