requirement-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes untrusted external data which could contain malicious instructions designed to manipulate the agent's output.
- Ingestion points: The skill ingests content from PRDs, design documents, API documentation, bug reports, issues, and source code repositories (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or 'ignore' instructions to distinguish between untrusted input data and agent instructions (SKILL.md).
- Capability inventory: The skill is capable of reading multiple file types (documentation and code) and writing a structured markdown file to the local directory (SKILL.md).
- Sanitization: There is no evidence of sanitization, validation, or filtering of the content retrieved from external sources before it is processed (SKILL.md).
Audit Metadata