design-brief
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as a specialized design specification tool with no malicious patterns detected. Its use of the
file_writecapability is appropriate for generating the intendedDESIGN.mdandbrief-preview.htmlfiles, and it does not perform network operations or access sensitive system paths. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted natural language data which could potentially contain malicious instructions.
- Ingestion points: The
briefinput parameter defined in the frontmatter ofSKILL.md. - Boundary markers: Not explicitly defined in the prompts.
- Capability inventory: The skill is limited to
file_writeoperations for documentation generation. - Sanitization: The risk is mitigated by a strict symbolic-to-concrete token resolution process (Section 2.1) and a validation step that forces the agent to prompt for clarification if the input does not match a closed vocabulary of valid design tokens.
Audit Metadata