design-solution
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external, untrusted data sources such as PRDs, tickets, and existing code patterns, which creates a potential surface for indirect prompt injection.
- Ingestion points: SKILL.md (Step 1) specifies loading PRDs, tickets, implementation plans, and code patterns.
- Boundary markers: Instructions do not include specific delimiters or warnings to ignore embedded instructions in these inputs.
- Capability inventory: The skill primarily generates text output and does not possess dangerous capabilities like network exfiltration, arbitrary command execution, or file system modifications.
- Sanitization: No sanitization or validation of the input content is specified.
Audit Metadata