vertical-expansion-blueprint
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill provides a blueprint for creating an automated coaching feedback system that analyzes session transcripts. The provided templates and configuration files (e.g.,
coachingPrompt.userPromptTemplatein the JSON configs) interpolate the full session transcript directly into the LLM's context. This creates a surface for indirect prompt injection, where instructions embedded within the transcript could attempt to override the coach's behavior or safety guidelines. - Ingestion points: The transcript of the roleplay session is ingested in the coaching feedback generation logic (e.g.,
server/routers.tsas described inreferences/adaptation-checklist.md). - Boundary markers: The provided templates do not use delimiters or boundary markers to isolate the untrusted transcript content from the coaching instructions.
- Capability inventory: The system uses an LLM to generate analysis and scoring based on the provided content.
- Sanitization: There are no instructions or templates for sanitizing or escaping the transcript content before it is processed by the LLM.
Audit Metadata