opc-resource-audit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files, creating a surface for indirect prompt injection attacks where adversarial instructions could influence the agent's behavior.
- Ingestion points: The instructions direct the agent to read from
opc-doc/inputs/founder-profile.mdandopc-doc/inputs/raw-ideas.md. - Boundary markers: Absent; the skill does not provide delimiters or specific instructions for the agent to ignore or isolate instructions potentially embedded within these source files.
- Capability inventory: The skill possesses file-writing capabilities, as it is instructed to use a Write tool to create Markdown and JSON files in the
opc-doc/directory. - Sanitization: Absent; there is no evidence of validation, filtering, or escaping of the content ingested from the external files before it is processed or stored.
Audit Metadata