agile-sprint
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for agile ceremony automation, specifically sprint planning. It generates markdown reports at specified paths within a project's
planning/directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data which presents a theoretical surface for injection attacks, though it is used for its primary intended purpose.
- Ingestion points: The
$ARGUMENTSvariable inSKILL.mdreceives input from the user's slash command. - Boundary markers: Absent; the skill does not use specific delimiters to isolate user-provided backlog items from its own instructions.
- Capability inventory: The skill involves file writing operations to the repository's file system (e.g.,
planning/sprints/sprint-YYYY-MM-DD.md). - Sanitization: Absent; the skill does not explicitly sanitize or validate the content of the
$ARGUMENTSor referenced backlog items.
Audit Metadata