build-plg-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and strategy frameworks. There is no code execution, file system access, or network activity initiated by the skill itself. All external links point to the official domain of the authoring organization.
- [PROMPT_INJECTION]: The skill utilizes the
$ARGUMENTSplaceholder to incorporate user-provided context into the prompt. While this represents a surface for indirect prompt injection (Category 8), the skill lacks any dangerous capabilities—such as file writing, shell execution, or network access—that could be abused by malicious user input. The impact is limited to influencing the generated text of the strategy. - Ingestion points: User input is interpolated at the
$ARGUMENTSplaceholder inSKILL.md. - Boundary markers: Absent. No specific delimiters or safety instructions are used to isolate the user-provided content.
- Capability inventory: The skill is restricted to generating text responses; it contains no subprocess calls, file-write operations, or network functions.
- Sanitization: No validation or sanitization logic is present for user-supplied input before it is processed by the agent.
Audit Metadata