implementation-readiness
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No security vulnerabilities were detected. The skill defines a structured methodology for auditing project documentation and lacks executable scripts or dangerous command patterns.
- [NO_CODE]: The skill is entirely composed of natural language instructions and does not include Python scripts, Node.js packages, or binary dependencies.
- [PROMPT_INJECTION]: The skill processes data from external sources such as Jira, Confluence, and Figma, which constitutes an indirect prompt injection surface. This risk is assessed as safe because the skill lacks the capabilities (such as shell access or privileged tool execution) to act on potentially malicious instructions embedded in those documents. 1. Ingestion points: External documentation artifacts (SKILL.md). 2. Boundary markers: Not specified in instructions. 3. Capability inventory: No executable tools or network capabilities are defined. 4. Sanitization: None identified.
Audit Metadata