wds-2-trigger-mapping
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a series of markdown-based workshop facilitators and document templates. It does not include any scripts, executables, or binary components that could pose a runtime security risk.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves the ingestion of user-provided documentation to synthesize business goals and user personas (e.g., in
step-00a-documentation-synthesis.md). While this provides a potential surface for indirect prompt injection, the skill possesses no capabilities that would allow such an injection to be exploited, such as command execution or network exfiltration. - Ingestion points: User documentation provided during the 'Documentation Synthesis' workshop in
step-00a-documentation-synthesis.md. - Boundary markers: Minimal; the agent relies on the user providing relevant text for analysis.
- Capability inventory: The agent is restricted to reading and writing markdown documentation within the project's local directory. No high-risk tools or system-level APIs are utilized.
- Sanitization: No specific sanitization logic is implemented for user-provided documentation, though the lack of executable context makes this a non-critical omission.
Audit Metadata