mvp-scope
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and user input while possessing file modification capabilities, creating a surface for potential injection attacks.
- Ingestion points: The skill reads files from the founder/ directory (facts.md, product-brief.md, persona-gen.md, validate-idea.md) and processes input via $ARGUMENTS.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between the skill's logic and potentially malicious instructions embedded in the data being processed.
- Capability inventory: The skill is granted Read and Edit permissions, specifically scoped to the founder/** directory, which could be abused to overwrite critical project documents if the agent is manipulated.
- Sanitization: The instructions do not include requirements for validating or sanitizing the content of the read files or arguments before they are used to generate the final output.
Audit Metadata