product-manager

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing untrusted external data.
  • Ingestion points: Reads user feedback and analytics data as described in SKILL.md.
  • Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the processed data.
  • Capability inventory: The skill is permitted to make edits to the project environment based on its analysis.
  • Sanitization: There are no instructions for sanitizing or validating the content of the user feedback or analytics before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 10:01 AM
Security Audit — agent-trust-hub — product-manager