plan-pipeline-ceo-review
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and a prompt template designed to guide an AI agent through a strategic product review process.
- [NO_CODE]: No scripts, executable code, or shell commands are present in the skill. The configuration includes
disable-model-invocation: true, which restricts the agent from calling external tools or executing code. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided feature requests for review. While this represents an attack surface for indirect prompt injection, the skill explicitly instructs the agent to only provide recommendations and to not perform any implementation or code changes, mitigating the risk of unauthorized actions.
Audit Metadata