game-retrospective

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project data, which constitutes an attack surface for instructions embedded in local files or playtest logs.
  • Ingestion points: Sprint/milestone identifiers supplied via arguments and project-specific files (code, docs, playtest data) accessed through Read, Glob, and Grep tools.
  • Boundary markers: Absent. The skill instructions do not define specific delimiters or instructions to ignore embedded prompts within the files being processed.
  • Capability inventory: The skill uses Read, Write, Glob, Grep, and AskUserQuestion tools to interact with the project environment.
  • Sanitization: Absent. There is no mechanism described to validate or sanitize the content of the files read into the agent's context before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 07:23 AM