application-lifecycle-trace
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and structure found no evidence of malicious intent, data exfiltration patterns, or obfuscated content.
- [EXTERNAL_DOWNLOADS]: The skill includes an installation reference to the author's own repository (
ChristopherAlphonse/calphonse-skills). This is a standard administrative procedure for skill management and originates from the identified vendor. - [PROMPT_INJECTION]: The skill functions by ingesting untrusted user input (feature descriptions) and processing it into a plan or document. This establishes a surface for indirect prompt injection.
- Ingestion points: User-provided descriptions of features or PRD requirements as described in the User Journey and Clarification Processor sections of
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the input data.
- Capability inventory: The skill environment includes access to
execute,edit, andreadtools, which are powerful capabilities for modifying the filesystem or running code. - Sanitization: There are no documented steps for sanitizing or validating user input before it is used by the Generation Engine to create Markdown files.
Audit Metadata