dx-standards-update
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes content from external or existing files.
- Ingestion points: Content is retrieved from a user-provided file path via the
--fromargument or fromfoundation/lessons.md(SKILL.md). - Boundary markers: The instructions do not define delimiters or specific markers to distinguish between data and instructions in the source files.
- Capability inventory: The skill can read local files and write or modify files within
context/standards/andfoundation/lessons.md. - Sanitization: No sanitization or validation mechanisms are described to filter out potential instructions embedded in the ingested text.
Audit Metadata