pomasa

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a generator that ingests user-provided information (such as research topics, initial ideas, and analysis methods) to create agent blueprints and project documentation. This ingestion represents a potential attack surface where malicious input could influence the behavior of the generated agents. However, the skill explicitly mandates the inclusion of architectural patterns like 'Workspace Isolation' (STR-03) and 'Verifiable Data Lineage' (QUA-03) in every generated system to mitigate these risks.
  • [COMMAND_EXECUTION]: The skill provides templates for generating shell scripts (export.sh and assemble.sh) used for document assembly and format conversion via tools like pandoc and xelatex. These scripts include basic sanitization logic for filenames and are designed to operate strictly within the user's project workspace to prevent unauthorized file system access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 08:52 AM