sprint-status

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill reads and processes content from external files including sprint plans, story files, and YAML status files.
  • Ingestion points: Files located in production/sprints/, the production/sprint-status.yaml file, and any file paths referenced within the sprint plan.
  • Boundary markers: None. The skill does not provide the agent with instructions to ignore or treat content from these external files as untrusted data.
  • Capability inventory: The skill utilizes the Read, Glob, and Grep tools. It lacks capabilities for file writing, network communication, or arbitrary command execution.
  • Sanitization: There is no evidence of sanitization or validation of the content retrieved from external files before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 09:20 PM