software-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines agent behaviors that involve reading and processing content from various project documentation folders such as
proposals/,decisions/,specs/,postmortems/, andguides/to provide maintenance suggestions. - Ingestion points: The agent reads markdown files within the software lifecycle project folders to track status and metadata (e.g.,
status: draft,last_verified). - Boundary markers: Not explicitly defined within the skill instructions; it relies on the host platform's standard markdown processing.
- Capability inventory: The skill uses a
writetool to create new documents from templates and suggests links or excerpts between related documents. - Sanitization: The skill instructions focus on organizational metadata and lifecycle status; there is no evidence of the agent executing content from these documents as code or system commands.
Audit Metadata