product-lens
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown instructions without any associated scripts or executable code. Its operations are limited to natural language processing and documentation generation.
- [PROMPT_INJECTION]: The 'Founder Review' mode instructs the agent to ingest and analyze local project files such as README, package.json, and commit logs. This establishes a surface for indirect prompt injection from untrusted project data. However, given the skill's purpose and lack of dangerous capabilities, this is assessed as a low-risk design pattern.
- Ingestion points: SKILL.md (Founder Review mode reads project files)
- Boundary markers: Absent
- Capability inventory: Local file reads, markdown documentation generation (PRODUCT-BRIEF.md)
- Sanitization: Absent
Audit Metadata