anth-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to verify deployment checklist items by following external evidence links and analyzing deployment artifacts. This creates a vulnerability surface where malicious external content could provide instructions to the agent to bypass validation steps or misreport findings.\n- Ingestion points: External evidence links and deployment artifacts referenced in the Instructions section of SKILL.md.\n- Boundary markers: The skill mandates the use of redacted receipts and metadata-only logging, serving as an output boundary to prevent sensitive data leakage.\n- Capability inventory: The skill is configured to use Read, Grep, and Bash(curl:*) tools for resource processing.\n- Sanitization: Instructions emphasize the use of synthetic fixtures and staging environments to validate readiness before production promotion, which mitigates exposure risks.
Audit Metadata