pia-generation
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection attack surface identified.
- Ingestion points: Intake questions and Product Requirements Document (PRD) links as described in SKILL.md.
- Boundary markers: The skill includes 'No silent supplement' and mandatory source attribution markers to verify data origins.
- Capability inventory: File read and write operations within the ~/.claude/plugins/config/ directory and structured report generation.
- Sanitization: Requires tagging all citations with source metadata and mandates attorney review for regulatory gatekeeping.
Audit Metadata