grill-me-qa
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows its stated purpose of providing a structured interview for QA strategy validation.
- [PROMPT_INJECTION]: The skill includes functionality to explore the local codebase, test suites, and CI configuration files to automate context gathering. This creates a surface for indirect prompt injection where instructions embedded in the analyzed code could influence the agent's behavior.
- Ingestion points: Codebase and CI configuration exploration described in Phase 1 of
SKILL.md. - Boundary markers: Absent; there are no specific instructions to treat external file content as untrusted or to ignore embedded instructions within them.
- Capability inventory: The skill is restricted to reading files and generating reports; it contains no subprocess calls, network requests, or file-writing capabilities.
- Sanitization: No sanitization of ingested code content is performed before analysis.
Audit Metadata