plan-security-assessment
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external project file which creates an indirect prompt injection surface.
- Ingestion points: The skill reads
security-artifacts/scope.mdinSKILL.mdto extract assessment parameters. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the source file.
- Capability inventory: The skill is restricted to file system read and write operations for documentation purposes.
- Sanitization: No sanitization or validation of the input file content is specified.
Audit Metadata