staircase-routing
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of Markdown documentation files providing guidance on directory traversal strategies. No executable code, scripts, or binary assets are present.
- [INDIRECT_PROMPT_INJECTION]: The described strategy involves the agent reading content from files such as
CLAUDE.md,AGENTS.md, andRULES.mdencountered during directory traversal. This represents a potential ingestion surface for untrusted data if the agent operates in an untrusted project environment. - Ingestion points: Files matching names like
CLAUDE.md,AGENTS.md,START.md,RULES.md,README.md,TODO.md, or custom keys instaircase-config.json(as described inSKILL.md). - Boundary markers: Absent; the documentation does not specify the use of delimiters or 'ignore' instructions for the content of discovered files.
- Capability inventory: None; the skill is purely instructional and provides no code or tool definitions.
- Sanitization: Absent; no validation or sanitization of the content of the discovered signpost files is mentioned.
Audit Metadata