requirements-elicitation
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data sources which may contain malicious instructions.
- Ingestion points: The skill instructions in
SKILL.mdspecify extracting requirements from external sources including "Business process documents", "User manuals", "Training materials", and "Support tickets and feedback". - Boundary markers: The skill does not define specific delimiters or "ignore instructions" wrappers for the data it processes.
- Capability inventory: The skill utilizes
Read,Grep, andGlobfor data ingestion andWritefor artifact creation on the local file system. - Sanitization: There are no instructions for sanitizing or validating the content extracted from these external documents before they are processed by the agent.
Audit Metadata