agile-story
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external task context which could lead to indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: Data is ingested via the $ARGUMENTS variable in SKILL.md from story references or issue descriptions.
- Boundary markers: No specific boundary markers or instructions to disregard embedded content are present in the processing of $ARGUMENTS.
- Capability inventory: The skill is capable of modifying repository files and suggests the execution of development commands for tests and linting.
- Sanitization: There is no evidence of sanitization or validation for the data processed from the external context.
Audit Metadata