discover-presentation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages files on the local filesystem, including writing project state to
DISCOVERY.jsonandPROJECT.json. It also provides functions to delete existing project artifacts through a user-confirmed 'Restart Guard' process. - [DYNAMIC_EXECUTION]: The skill invokes a local JavaScript file (
scripts/presentation-theme-invalidation.mjs) to determine which files should be invalidated or preserved during project updates. This script is used for internal path calculations based on changes to themes or fonts. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection via user-supplied interview answers.
- Ingestion points: User responses to the discovery questions defined in
QUESTIONS.mdare captured and processed. - Boundary markers: The skill implements a confirmation step in
SKILL.md(Step 2), where the agent presents a summary of all gathered data for user verification before any files are written. - Capability inventory: The skill has the capability to write configuration files (
WRITE_DISCOVERY.md), delete project files (RESTART-GUARD.md), and execute a local helper script (RESTART-GUARD.md). - Sanitization: The skill structures the data into a JSON schema, which provides some implicit formatting, though it does not explicitly sanitize the text content provided by the user.
Audit Metadata