whats-next
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill reads and processes external documentation files (such as
seed.md,decisions.md, andproposal.md) to generate workflow recommendations. This ingestion of untrusted data creates a potential surface for indirect prompt injection. - Ingestion points: Files located within the
docs/threads/directory, includingseed.md,decisions.md, androadmap.md. - Boundary markers: The instructions do not define boundary markers or specific delimiters to isolate the content of these files from the agent's operational instructions.
- Capability inventory: The skill is configured for read-only access to the local filesystem and git status; it does not request network access or the ability to write or modify files.
- Sanitization: There is no mention of sanitization, filtering, or validation for the content retrieved from the project documentation files.
Audit Metadata