task-status
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and summarizes data from local project files which could contain malicious instructions designed to influence the agent's summary or suggested actions.\n
- Ingestion points: Content is read from
contract.md,status.md, defect ledgers, and commit metadata (File: SKILL.md).\n - Boundary markers: The instructions do not specify any delimiters or warnings to treat the content of these files strictly as data rather than instructions.\n
- Capability inventory: The skill is explicitly constrained to read-only operations and is instructed not to execute tests, write files, or modify external trackers (File: SKILL.md).\n
- Sanitization: There is no evidence of validation or sanitization of the content retrieved from the repository files.
Audit Metadata