interview-debrief
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/review_interview.py) to process interview data. This script is execution-only, runs locally, and uses a common helper library (_common.py) for data validation. It does not spawn shells or perform network operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data (interview questions and answers). While this is a potential injection surface, the skill includes explicit instructions in
SKILL.mdandreferences/debrief-method.mdto avoid re-constructing or 'filling in' missing memories, which serves as a natural guardrail against interpreting user data as new instructions. The processing logic is also confined to a deterministic Python script with strict schema validation. - Ingestion points: User input provided to
scripts/review_interview.pyviainput.json. - Boundary markers: The script uses strict JSON schema validation via helper functions like
require_text,require_object, andoptional_choicein_common.pyto ensure data remains within expected types. - Capability inventory: The skill only performs local data transformation and produces a JSON report for the agent to present to the user. No file writes (by default), no network access, and no privilege escalation.
- Sanitization: Validation of input keys and types is present in
_common.pyandscripts/review_interview.py.
Audit Metadata