pre-mortem
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (project plans, documents, or vault files) which could contain hidden instructions aimed at influencing the agent's behavior.
- Ingestion points: Processes project documentation and files located at user-provided vault paths (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are used when reading external content.
- Capability inventory: Includes the ability to write analysis results to the local filesystem in the
vault/decisions/directory. - Sanitization: No explicit sanitization or validation of the input data is described.
Audit Metadata