studio-develop-feature-finder
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data from untrusted sources, which could contain malicious instructions designed to subvert agent behavior.
- Ingestion points: The agent is directed to read the entire repository, including code, product documentation (
docs/PRODUCT.md), PRDs, and roadmaps (File: SKILL.md, Step 2). It also performs live research on external websites and comparable products (File: SKILL.md, Step 3). - Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its own instructions and content found in the codebase or external research.
- Capability inventory: The skill possesses the ability to read the file system, perform web research, and write to plan/roadmap files (File: SKILL.md, Step 5).
- Sanitization: The skill does not mention any validation, filtering, or sanitization of the content retrieved from the repository or the internet before it is processed or presented to the user.
Audit Metadata