user-interviews
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and local files to generate its output, creating a surface for indirect instructions to influence the agent.
- Ingestion points: The skill processes user-provided
$ARGUMENTSand reads from several files:founder/facts.md,founder/product-brief.md,founder/persona-gen.md, andfounder/validate-idea.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between data and potential commands within the ingested files.
- Capability inventory: The skill is authorized to use
ReadandEdittools within thefounder/**directory scope. - Sanitization: The instructions do not include any validation, escaping, or filtering logic for the content retrieved from the input files before it is used to generate the interview script.
Audit Metadata