pre-mortem
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it performs deep analysis of external, potentially untrusted source code.
- Ingestion points: Processes files and directories specified in the $ARGUMENTS variable or discovered during project layout analysis (referenced in SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or directives to ignore instructions embedded within the analyzed source code.
- Capability inventory: The agent uses TaskCreate for progress tracking, AskUserQuestion for user interaction, and performs file read/write operations (targeting PRE-MORTEM.md).
- Sanitization: No procedures are defined for sanitizing or escaping code content before it is processed by the model.
Audit Metadata