task-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including route contracts, persona definitions, and journey documentation. If these files are compromised, they could contain malicious instructions designed to manipulate the agent's behavior.
- Ingestion points: Reads files related to route contracts, personas, and journey sequences (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the external data.
- Capability inventory: Uses 'Read' and 'Grep' tools to parse documentation and generate text-based analysis reports.
- Sanitization: There is no mention of filtering or sanitizing the content retrieved from external documents.
- [EXTERNAL_DOWNLOADS]: The skill references evaluation artifacts and a source repository located on the author's GitHub profile ('github.com/jacob-balslev/skill-graph').
Audit Metadata