game-design-review
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze external game design documents, creating a surface for indirect prompt injection where instructions within a document could attempt to influence the agent's behavior.
- Ingestion points: The workflow uses
ReadandGlobtools in Step 1 to process document content. - Boundary markers: The instructions do not specify the use of delimiters (such as XML tags or triple quotes) to separate user-provided content from the agent's system instructions.
- Capability inventory: The skill utilizes
Read,Write, andAskUserQuestiontools, allowing for file system interaction and user communication based on data processed from the input documents. - Sanitization: No mechanisms for sanitizing or validating the contents of the design documents are defined in the workflow.
Audit Metadata