change-checklist
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based checklists and instructional text designed to guide a user through project pivots and technical issue analysis. It does not include any scripts, automation, or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve analyzing external project artifacts such as Product Requirement Documents (PRDs), architecture specifications, and logs. While this represents a data ingestion surface, the risk is negligible as the skill lacks any computational capabilities (such as file system writes, network requests, or code execution) that could be exploited by malicious content within those artifacts.
- Ingestion points: Analyzes PRDs, architecture documents, frontend specs, and system logs (SKILL.md).
- Boundary markers: No explicit delimiter instructions are provided for handling external content.
- Capability inventory: None. The skill does not call any tools or execute code.
- Sanitization: No validation or sanitization of ingested content is performed.
Audit Metadata