requirements-elicitation

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data sources which may contain malicious instructions.
  • Ingestion points: The skill instructions in SKILL.md specify extracting requirements from external sources including "Business process documents", "User manuals", "Training materials", and "Support tickets and feedback".
  • Boundary markers: The skill does not define specific delimiters or "ignore instructions" wrappers for the data it processes.
  • Capability inventory: The skill utilizes Read, Grep, and Glob for data ingestion and Write for artifact creation on the local file system.
  • Sanitization: There are no instructions for sanitizing or validating the content extracted from these external documents before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 09:35 AM