weekly-report
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-provided chat logs and notes, creating an attack surface for indirect prompt injection.
- Ingestion points: Progress material provided by the user as input for report generation.
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the input are present.
- Capability inventory: The skill uses document creation tools to generate Word files.
- Sanitization: There is no explicit sanitization or filtering of the input data described in the instructions.
Audit Metadata