status
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the
founder/directory to generate status reports, creating a surface for indirect prompt injection. - Ingestion points: Accesses and reads all files within the
founder/folder and the${CLAUDE_PLUGIN_ROOT}/shared/conventions.mdfile. - Boundary markers: Lacks explicit delimiters or instructions for the agent to ignore any embedded commands or formatting within the source files.
- Capability inventory: The skill is restricted to
Read,Glob, andGreptools; it does not have file-write or network capabilities. - Sanitization: Content is read and summarized without escaping, filtering, or validation of the input data.
Audit Metadata