tasks
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from multiple files to generate a task list, creating a potential injection surface.\n
- Ingestion points:
02-DOCS/wiki/sdd/plans/<slug>.md,02-DOCS/wiki/sdd/specs/<slug>.md,02-DOCS/wiki/sdd/constitution.md, and02-DOCS/wiki/sdd/config.yaml.\n - Boundary markers: Absent. The instructions do not specify the use of delimiters or 'ignore' instructions when reading these files.\n
- Capability inventory: The skill performs file reading operations and appends content to the plan artifact.\n
- Sanitization: Absent. There are no instructions to sanitize or escape data retrieved from external sources before interpolation.
Audit Metadata