assess-pivot-impact
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the scope of project documentation management. It reads specific documentation files and writes a single ledger file,
docs/product/pivot-ledger.md, to record the impact of product pivots. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from project files (e.g.,
docs/product/vision.md,docs/specs/INDEX.md). While this presents a potential ingestion point for malicious instructions embedded in documents, the risk is effectively mitigated by the skill's mandatory human-in-the-loop requirement. The agent is instructed to confirm every entry in the resulting ledger with the user, ensuring that no decisions or subsequent actions are taken without manual oversight. - [COMMAND_EXECUTION]: The instructions include directory navigation (
cd) to a user-provided repository path. While the skill directs the agent to proceed without re-confirming the path if already provided, the scope of file writing is strictly limited to the creation of the markdown ledger, preventing arbitrary file modification or system-level command injection.
Audit Metadata