brainstorming
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by design.
- Ingestion points: The skill instructions direct the agent to "Check out the current project state first (files, docs, recent commits)" within
SKILL.mdto establish context. - Boundary markers: The instructions do not specify any delimiters or warnings to treat ingested project content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill possesses the capability to write validated designs to the filesystem (
docs/plans/) and perform git commits (SKILL.md). - Sanitization: There is no evidence of sanitization, filtering, or validation of the content read from project files before it is processed by the agent.
Audit Metadata