req-merger
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files which serves as an ingestion point for untrusted instructions. \n
- Ingestion points: The skill reads from
cleaned-requirements/issues.mdto extract answers provided by users. \n - Boundary markers: The instructions do not define specific delimiters or instructions to the agent to ignore any embedded commands within the
issues.mdcontent. \n - Capability inventory: The skill possesses
Read,Write, andBashcapabilities, which could be leveraged if the agent were to follow instructions embedded in the requirements data. \n - Sanitization: The skill lacks explicit validation or sanitization mechanisms for the data retrieved from input files before it is merged into the clarified requirements.
Audit Metadata