agent-retrospective
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests historical agent-session logs, which are untrusted and could contain adversarial instructions from previous interactions that might influence the agent's reasoning during the audit process.
- Ingestion points: Agent-session history and log files (SKILL.md, Sections 1 and 2).
- Boundary markers: Absent. The instructions do not establish clear boundaries or delimiters to separate the ingested history data from the agent's own auditing instructions.
- Capability inventory: The skill modifies instruction files, repository indices, and routers using the 'writing-for-agents' tool (SKILL.md, Section 6).
- Sanitization: While redacting secrets and personal data is required (SKILL.md, Section 2), the skill does not explicitly mandate sanitizing or escaping potentially malicious instructional content found within the logs.
Audit Metadata