validate-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill instructions focus on the logical validation of user-provided requirements. References to external files are limited to local project configuration ('.claude/lib/standards-repository.md' and 'standards.json').\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes untrusted user input for validation.\n
- Ingestion points: User input and requirements strings processed by the validation logic in 'SKILL.md'.\n
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the input being validated.\n
- Capability inventory: No dangerous tools or capabilities are present; the skill only outputs structured JSON validation results.\n
- Sanitization: No sanitization or filtering of the user input is performed prior to analysis.
Audit Metadata