flag-missing-facts-first
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and prompt templates for user-agent interaction. No malicious code, obfuscation, or data exfiltration patterns were found.
- [INDIRECT_PROMPT_INJECTION]: While the templates facilitate the ingestion of user-provided data (e.g., notes or bug summaries), the skill does not define or use any tools that interact with the filesystem, network, or system shell. This significantly mitigates the risk of indirect prompt injection as there are no executable capabilities to hijack.
- Ingestion points: Data is entered via placeholders like '[PASTE CURRENT NOTES / DATA]' in SKILL.md.
- Boundary markers: None provided in the templates.
- Capability inventory: No capabilities (subprocess, exec, network) detected in the skill.
- Sanitization: Not applicable as the skill does not perform data processing beyond natural language reasoning.
Audit Metadata