work-decomposition

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists exclusively of documentation, templates, and evaluation cases in Markdown and JSON formats. There are no executable scripts, binary files, or configuration files that trigger external actions.
  • [NO_CODE]: No programming logic or package dependencies are provided. The skill relies entirely on the agent's natural language reasoning to follow the provided planning framework.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs agents to ingest project files (Ingestion points: project source, requirements in SKILL.md), but lacks specific boundary markers or sanitization logic. Its primary capability is planning (Capability inventory: file read and plan generation), and it explicitly advises agents to respect authorized scopes and verify surfaces, which mitigates risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 08:12 PM