agile-review
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface because it ingests untrusted data from external sources and incorporates it into agent context.
- Ingestion points: The skill reads data from project issues, status closure reports, status checkpoints, and git history in files such as
SKILL.md(sections 'Consolidate deliveries' and 'Collect sprint metrics'). - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate ingested content from the agent's instructions.
- Capability inventory: The skill has file-writing capabilities, specifically saving the generated review to
planning/sprints/sprint-review-YYYY-MM-DD.md. - Sanitization: No sanitization, escaping, or validation of the external content is mentioned before it is interpolated into the final artifact.
Audit Metadata