xy-development
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest requirements from a
PRD.mdfile and dynamically generate Layer 3 acceptance criteria, which the agent then uses to guide and verify its work through command execution and file manipulation. - Ingestion points: The
workflow.mdfile specifies that the agent should read aPRD.mdfile at planning time to generate project-specific acceptance criteria. - Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions within the
PRD.mdare provided to the agent. - Capability inventory: The skill empowers the agent to execute shell commands (
pnpm build,pnpm test,pnpm lint,grep), perform file system operations, and use MCP browser tools (mcp__Claude_in_Chrome__*,mcp__Claude_Preview__*) for network-based verification. - Sanitization: There is no mention of sanitizing, escaping, or validating the content extracted from
PRD.mdbefore it is used to influence the agent's behavior and verification steps.
Audit Metadata