chaos-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided data such as code diffs, architecture descriptions, and service boundaries. This introduces a surface for indirect prompt injection where malicious instructions could be embedded in the analyzed content. The risk is minimized as the skill does not possess capabilities to execute code, make network requests, or modify the file system.
- Ingestion points: Analysis of feature paths, components, services, and diff areas (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: None. The skill defines no scripts, tools, or executable commands.
- Sanitization: Absent.
- [NO_CODE]: The skill consists entirely of natural language instructions and metadata configuration. No scripts, binaries, or third-party dependencies are included or referenced.
Audit Metadata