analyzing-product-risks
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and defines a workflow for qualitative risk assessment. It does not perform any network operations, execute arbitrary commands, or handle sensitive credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill reads from a local reference file
test-privateer/references/artifact-routing.mdto maintain consistency in risk numbering and tracking. While this is an ingestion point for external data, the skill's logic is confined to analysis and documentation within the agent's context, posing no significant risk of exploitation. - [DATA_EXPOSURE]: There is no access to sensitive system files, environment variables, or private user data. The file path referenced is part of the skill's internal organizational structure.
Audit Metadata