re-generate-report
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from artifacts generated in previous analysis phases, creating a surface for indirect prompt injection.
- Ingestion points: manifest.json and artifact files (structure maps, logic diagrams, and requirements) in docs/reverse/{analysis}/.
- Boundary markers: The instructions lack explicit delimiters or instructions to the agent to disregard potential instructions embedded within the artifact data.
- Capability inventory: The skill utilizes Read, Grep, Glob, Bash, and Write tools for processing and reporting.
- Sanitization: No sanitization or escaping mechanisms are specified for the external content before it is consolidated into the final specification document.
Audit Metadata