brand-story
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local configuration files which could theoretically contain malicious instructions.
- Ingestion points: Reads
brand.yaml,context.md, and.agents/brand-context.mdfrom the local file system (SKILL.md). - Boundary markers: None identified; external content is loaded directly into the context.
- Capability inventory: No dangerous capabilities (subprocess calls, network operations, or file system writes) were found in this skill.
- Sanitization: No explicit sanitization or validation of the loaded YAML/Markdown content is performed before processing.
Audit Metadata