lpc-author
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to generate a product canvas, which can be written to a local file system.
- Ingestion points: User provides descriptive text for multiple sections (Problem, Customer, Outcomes, Solutions, etc.) as detailed in
SKILL.md. - Boundary markers: The skill implements a structured workflow where Claude is instructed to critique and refine user input against external quality standards (
references/quality-standards.md) before moving to the next phase, which acts as an inherent validation boundary. - Capability inventory: The skill is capable of writing the final Markdown artifact to a user-specified file path or a default path in the current working directory as noted in the "Final Step" section of
SKILL.md. - Sanitization: The instructions require the agent to manually review and refine inputs with the user, ensuring the content is relevant to the canvas structure before it is formatted into the final template.
Audit Metadata