security-qa-scenarios
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely composed of markdown documentation and reference materials. It contains no executable scripts, binaries, or instructions for the agent to perform network operations, file system modifications, or process management.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to analyze user-provided descriptions of software behavior and data flows to generate test scenarios. This represents an indirect prompt injection surface where untrusted data enters the agent's context.
- Ingestion points: The design process in
SKILL.md(Step 1) involves inspecting behavior and data flow descriptions provided in the user prompt. - Boundary markers: The instructions do not define specific delimiters or explicit warnings for the agent to ignore instructions embedded within the user-provided data.
- Capability inventory: None. The skill does not possess tools or scripts for command execution, file system access, or external network communication.
- Sanitization: No input sanitization or validation logic is defined in the instructions.
- [SAFE]: No obfuscation techniques, hardcoded credentials, or persistence mechanisms were detected. The skill content and metadata are consistent with its stated purpose of security QA guidance.
Audit Metadata