game-retrospective
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project data, which constitutes an attack surface for instructions embedded in local files or playtest logs.
- Ingestion points: Sprint/milestone identifiers supplied via arguments and project-specific files (code, docs, playtest data) accessed through
Read,Glob, andGreptools. - Boundary markers: Absent. The skill instructions do not define specific delimiters or instructions to ignore embedded prompts within the files being processed.
- Capability inventory: The skill uses
Read,Write,Glob,Grep, andAskUserQuestiontools to interact with the project environment. - Sanitization: Absent. There is no mechanism described to validate or sanitize the content of the files read into the agent's context before analysis.
Audit Metadata