legal
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by scanning the project's source code and configuration files to identify data collection practices and third-party integrations.
- Ingestion points: Project files are accessed via
GlobandGreptools during 'Pre-Generation Checks' inprivacy-policy/SKILL.mdto detect SDKs and data collection patterns (e.g., searching for 'Firebase', 'HealthKit', or 'NSCameraUsageDescription'). - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within the files it analyzes.
- Capability inventory: The skill has the capability to
Read,Write, andEditfiles within the local workspace, and interact with the user viaAskUserQuestion. It does not have network access or shell execution capabilities. - Sanitization: There is no explicit sanitization or filtering of the content extracted from the files before it is processed by the agent to populate legal templates.
Audit Metadata