board-deck-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied business metrics to generate decks, creating a vulnerability surface where malicious data could influence agent behavior.
- Ingestion points: Business data metrics provided through the
/board-deckcommand inSKILL.md. - Boundary markers: Absent. The instructions do not define delimiters to separate user data from the system instructions.
- Capability inventory: The skill generates text and markdown reports in
SKILL.mdandtemplates/board-deck-template.md; it does not have capabilities for network access, file system manipulation, or shell execution. - Sanitization: There is no validation or sanitization of the input data.
Audit Metadata