propagate-design-change
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes Game Design Documents (GDD) and Architectural Decision Records (ADRs) as inputs, which presents a surface for indirect prompt injection. * Ingestion points: Reading of GDD files and ADRs in docs/architecture/ (Steps 2 and 4). * Boundary markers: None provided to distinguish document content from instructions. * Capability inventory: Includes Bash, Write, and Task tools. * Sanitization: The skill does not specify sanitization of document content.
- [COMMAND_EXECUTION]: The skill uses a shell command to access previous file versions. * Evidence:
git show HEAD:design/gdd/[filename].md(Step 3). * Context: Legitimate use of git for version comparison.
Audit Metadata