and-interview-contract
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a behavioral contract defining rules for agent interaction and does not include any executable code or instructions for unauthorized network operations.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest human responses and repository evidence (code, documentation, GitHub records), which creates a potential surface for indirect prompt injection. The skill mitigates this by providing explicit instructions to separate factual evidence from human decisions and by enforcing filesystem-safe sanitization for any user-influenced data, such as buffer titles.
- Ingestion points: GitHub repository evidence and direct human interview answers.
- Boundary markers: The instructions mandate clear separation between 'confirmed results' and 'unresolved inputs'.
- Capability inventory: Local filesystem writes to a specific temporary directory for session recovery.
- Sanitization: Implements specific rules to replace whitespace and control characters in user-influenced paths with hyphens.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill defines a local recovery mechanism using the system's temporary directory (
<system-temp>/<workflow-skill>/) to maintain state across sessions. This protocol incorporates security best practices by explicitly prohibiting the storage of credentials in these buffers and requiring SHA-256 integrity checks to verify the checkpointed state before resuming operations.
Audit Metadata