discover-presentation

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill captures free-form user responses during the discovery phase and records them in DISCOVERY.json and PROJECT.json, which drive downstream project management. Ingestion points: Free-form answers to interview questions defined in QUESTIONS.md. Boundary markers: No specific delimiters or safety instructions are used when interpolating user-provided data into project state files. Capability inventory: The skill is authorized to write and update project configuration files and delete existing project artifacts (Agenda, Media Specs, etc.) based on the discovery state. Sanitization: No validation or sanitization of user-provided content, such as font names or URLs, is specified before persistence.
  • [EXTERNAL_DOWNLOADS]: The skill allows for the storage of an External Font Override containing a sourceUrl provided by the user (file: QUESTIONS.md). This introduces a dependency on remote external resources into the project environment.
  • [COMMAND_EXECUTION]: The agent is instructed to execute a local JavaScript file (scripts/presentation-theme-invalidation.mjs) to calculate file invalidation plans during requirement updates (file: RESTART-GUARD.md). While the script itself is a static part of the skill, it represents a controlled execution of script logic within the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 01:44 PM
Security Audit — agent-trust-hub — discover-presentation