reviewing-test-plan
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions define a workflow for ingesting and analyzing untrusted external documents (test plans and upstream specifications), which constitutes an indirect prompt injection surface.\n
- Ingestion points: Data enters the agent's context through the test plans and upstream specifications (feature-specs, api-specs, PRDs) processed during Step 1 of the Workflow in
SKILL.md.\n - Boundary markers: The instructions do not specify any explicit boundary markers or delimiters to isolate user-provided text from the system instructions.\n
- Capability inventory: The skill is restricted to text generation for verdicts and findings; it does not request or use tools for shell command execution, file system modification, or network access.\n
- Sanitization: There are no instructions for sanitizing, escaping, or validating the content of the external documents before they are analyzed by the model.
Audit Metadata