use-case-specification
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface where untrusted data could be ingested into the agent context via specification files.
- Ingestion points: The skill reads
*_use_case_spec.mdfiles in Step 0 (existing spec check) and in the Edit Protocol section when the user updates the file directly. - Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between data and instructions when reading the specification file.
- Capability inventory: The skill primarily performs conversational tasks and file write operations within the project directory.
- Sanitization: The skill lacks mechanisms to sanitize or validate the content of the markdown files before they are processed by the agent.
- [SAFE]: The skill includes a link to the official AWS Responsible AI Lens documentation (docs.aws.amazon.com), which is a trusted service domain. This link is used for providing legitimate guidance to the user.
Audit Metadata