adopt
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a local utility that inspects project documentation for template compliance using Read, Glob, and Grep. It generates an advisory report without performing high-risk system modifications or network operations.
- [PROMPT_INJECTION]: The skill reads user-provided markdown files which could contain indirect prompt injection content. Ingestion points: Project GDD, ADR, and story files. Boundary markers: None present in the instructions. Capability inventory: Local file operations and user interaction. Sanitization: No sanitization of ingested text is performed. However, the risk is negligible as the skill performs structural analysis rather than instruction following from the data.
Audit Metadata