promptmaster
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied requests and project-specific preferences stored in
decisions.mdto generate new, optimized instructions for the agent. - Ingestion points: The skill reads project preferences from
decisions.mdand takes raw user input to perform rewrites. - Boundary markers: There are no explicit boundary markers or sanitization logic defined to prevent instructions within the processed data from influencing the agent's logic, though this is inherent to the skill's purpose as a prompt engineer.
- Capability inventory: The skill is designed to rewrite prompts and then execute the resulting output in the same turn.
- Sanitization: No sanitization of external content is specified before interpolation into the prompt rewrite loop.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for users to manually install the skill via GitHub, which is a standard distribution method for AI agent extensions.
- The repository
https://github.com/Jakeschincariol/promptmaster-skillis the primary installation source for the skill's logic and configuration files. - [SAFE]: The skill uses local files for configuration and auditing, following standard patterns for prompt engineering tools.
- The
waste-patterns.jsonfile contains benign prompt improvement guidelines focused on token efficiency and clarity. - Instructions focus on reducing conversation churn and improving deliverable specificity without requesting elevated privileges or network access.
Audit Metadata