consciousness-council
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process user-provided questions and dilemmas to simulate a deliberation. This ingestion of untrusted data allows for potential indirect prompt injection where a user could embed instructions to manipulate agent behavior. The potential impact is noted as the skill is configured with Read and Write tool access.
- Ingestion points: User-provided questions and challenges (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or isolation instructions for user input.
- Capability inventory: The skill uses Read and Write tools as defined in the SKILL.md frontmatter.
- Sanitization: There is no specified logic for sanitizing or validating user input before processing.
- [NO_CODE]: The skill is comprised entirely of markdown-based instructions and metadata. No executable scripts, binaries, or package installations were found in the provided files.
Audit Metadata