creative-production-spec
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests various external project documents such as briefs, canon, bibles, and evidence to synthesize a production specification. This creates a surface for indirect prompt injection where instructions embedded in those files could influence the agent's behavior.
- Ingestion points:
../../references/CREATIVE_PRODUCTION_SPEC.mdand project-specific files mentioned in the instructions (brief, canon, bibles, etc.). - Boundary markers: The skill does not provide explicit delimiters or instructions to ignore commands potentially embedded within the source documents.
- Capability inventory: The agent is instructed to read local files, write a specification to
00_project/creative_production_spec.md, and execute project validation. - Sanitization: No explicit sanitization or validation of the input content is mentioned before it is processed and written to the output file.
Audit Metadata