reconcile-proposal
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill reads and processes external text data which could contain instructions intended to influence the agent's behavior during reconciliation.
- Ingestion points: The skill reads
seed.md,decisions.md, andproposal.mdfrom the project'sdocs/threads/directory (SKILL.md Step 2). - Boundary markers: No specific boundary markers or instructions are employed to distinguish authoritative data from the skill's operational logic.
- Capability inventory: The agent has the capability to modify the local
proposal.mdfile and call the/emit-pending-decisionstool (SKILL.md Step 6). - Sanitization: There is no evidence of sanitization or content validation performed on the inputs retrieved from the authority files.
Audit Metadata