materialize-roadmap-threads
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes data from a
roadmap.mdfile to drive the creation of new files and folders. This represents a surface for indirect prompt injection where malicious instructions embedded in a brief could influence the materialization process. - Ingestion points: Reads content from
roadmap.mdlocated withindocs/threads/directory structures. - Boundary markers: Employs a preflight validation step to check for well-formed headings and required fields before execution.
- Capability inventory: Utilizes
/allocate-threadfor directory and file creation, modifiesroadmap.md, and calls/emit-pending-decisionsfor error handling. - Sanitization: Validates brief structure and identities but does not explicitly filter content for embedded instructions.
Audit Metadata