protocol-selector
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of markdown instructions and YAML configuration for an AI agent. It does not perform network operations, access sensitive files, or execute external code.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection. 1. Ingestion points: User-provided system requirements and project context in SKILL.md. 2. Boundary markers: None specified to delineate user input from instructions. 3. Capability inventory: File-write operations to the docs/api-report/ directory. 4. Sanitization: No input validation or escaping mentioned. This finding is assessed as safe as the skill is purely advisory and lacks hazardous capabilities.
Audit Metadata