project-dossier
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard project management utility for creating and maintaining a local project facts file (PROJECT.md).
- [DATA_EXPOSURE]: The skill handles project-related data such as addresses and jurisdiction details, but it is restricted to local file tools (Read, Write, Edit) and does not perform network operations or access system-level sensitive files.
- [PROMPT_INJECTION]: The skill reads from a user-controlled PROJECT.md file during updates. 1. Ingestion points: Reads the existing PROJECT.md file in the working directory. 2. Boundary markers: Data is organized into structured markdown tables with clear section headers. 3. Capability inventory: Restricted to Read, Write, Edit, Glob, and AskUserQuestion; no shell, eval, or network tools are permitted. 4. Sanitization: No explicit content sanitization is mentioned, but the skill lacks the capabilities required to execute malicious instructions found in the data.
Audit Metadata