decision-tree-interview

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes external data.
  • Ingestion points: The skill instructions command the agent to read the file ../../references/CREATIVE_DECISION_PROTOCOL.md and to process user-provided creative responses during an interview.
  • Boundary markers: The skill does not define delimiters or provide 'ignore embedded instructions' warnings for the data it processes.
  • Capability inventory: The skill is capable of reading files from parent directories and writing records to 00_project/creative_decisions.jsonl.
  • Sanitization: No sanitization, validation, or escaping protocols are specified for the external content before it is processed or written to disk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:41 AM