product-tracking-design-tracking-plan
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files (
.telemetry/product.mdand.telemetry/current-state.yaml) to inform the design of the tracking plan. This processing of untrusted project data constitutes an indirect prompt injection surface.\n - Ingestion points: Files
.telemetry/product.mdand.telemetry/current-state.yamlare read to extract product models and current tracking states.\n - Boundary markers: The instructions lack explicit boundary markers or delimiters to isolate the ingested file content from the agent's instructions.\n
- Capability inventory: The skill possesses file-write capabilities, outputting results to
.telemetry/tracking-plan.yamland.telemetry/delta.md.\n - Sanitization: No explicit sanitization or validation of the input file content is performed before processing.
Audit Metadata