project-management
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The 'Senior Project Manager' specialist processes external site specifications from
ai/memory-bank/site-setup.md, creating a potential surface for indirect prompt injection. - Ingestion points: Reads specifications from
ai/memory-bank/site-setup.mdas defined inreferences/project-manager-senior.md. - Capability inventory: The agent is instructed to write task lists to
ai/memory-bank/tasks/and includes instructions for running a local quality assurance script (./qa-playwright-capture.sh). - Boundary markers: The skill does not specify the use of delimiters or 'ignore' instructions when interpolating data from the specification file into the task lists.
- Sanitization: There is no evidence of input validation or escaping for the content ingested from the external specification file.
Audit Metadata