sprint-status
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill reads and processes content from external files including sprint plans, story files, and YAML status files.
- Ingestion points: Files located in
production/sprints/, theproduction/sprint-status.yamlfile, and any file paths referenced within the sprint plan. - Boundary markers: None. The skill does not provide the agent with instructions to ignore or treat content from these external files as untrusted data.
- Capability inventory: The skill utilizes the
Read,Glob, andGreptools. It lacks capabilities for file writing, network communication, or arbitrary command execution. - Sanitization: There is no evidence of sanitization or validation of the content retrieved from external files before it is processed by the agent.
Audit Metadata