roadmap
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve scanning the codebase, which represents an ingestion point for untrusted data that could potentially contain malicious instructions meant to influence the agent's roadmap generation.
- Ingestion points: Codebase scanning specified in SKILL.md.
- Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded within the codebase content.
- Capability inventory: The skill is limited to rendering text, timeline diagrams, and flowcharts directly in the chat. It does not contain instructions for writing files, executing shell commands, or making network requests.
- Sanitization: Absent; no specific filtering or validation of the codebase content is mentioned.
Audit Metadata