opc-asset-ops
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from previously generated local files to determine asset priorities and update the business state. This ingestion of data represents an attack surface for indirect prompt injection if the source files are manipulated to include instructions.
- Ingestion points: The skill reads files from the
opc-doc/outputs/06-mvp-design/andopc-doc/outputs/07-conversion-loop/directories (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or provide guidance for the agent to ignore potentially embedded instructions within the ingested content.
- Capability inventory: The skill uses a 'Write' tool to create or update markdown files and JSON state files within the
opc-doc/structure (SKILL.md). - Sanitization: There is no evidence of input validation or sanitization of the content read from these external files before it is processed by the agent.
Audit Metadata