grill
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation and issue tracker data, creating an indirect prompt injection surface.
- Ingestion points: Files in the 'docs/' directory, project agent instructions, and tracker issue bodies and comments.
- Boundary markers: The skill does not instruct the agent to use delimiters or ignore instructions embedded in the external data.
- Capability inventory: The skill can write to local files (plans, ADRs, glossary) and publish issues to external trackers.
- Sanitization: No explicit sanitization or validation of external content is defined.
Audit Metadata