standup
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to gather and process data from multiple external sources, creating an attack surface where malicious instructions hidden in those sources could influence the agent's behavior.
- Ingestion points: The skill pulls data from
git log, open PRs, project trackers (Notion, Linear, GitHub Projects), meeting transcripts, notes, and Slack threads. - Boundary markers: Absent. The instructions do not include specific delimiters or directives for the agent to ignore or isolate potentially malicious instructions embedded within the gathered context.
- Capability inventory: The skill requires the ability to execute shell commands (
git log), read local files (team-memory/directory), and likely access external APIs to retrieve project and meeting data. - Sanitization: Absent. There are no steps provided to sanitize, filter, or validate the content retrieved from external communication tools or project trackers before it is incorporated into the final status update.
Audit Metadata