write-roadmap
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill ingests data from local project files (e.g., vision.md, specs/INDEX.md, and assessment files) which represents a potential indirect prompt injection surface. This risk is mitigated by specific field validation (SHA, status) and mandatory human approval gates before committing changes. Ingestion points: docs/roadmap/assessments/MILE-N.md, docs/product/vision.md, and docs/specs/INDEX.md. Boundary markers: None. Capability inventory: Writing to docs/roadmap/INDEX.md. Sanitization: Validates commit SHAs and terminal dispositions in assessment files.
Audit Metadata