asset-spec
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests data from external source files (GDDs, level designs, and character profiles) and interpolates this content into tasks for sub-agents (Art Director and Technical Artist).
- Ingestion points: Files located in
design/gdd/,design/levels/, anddesign/narrative/are read in Phase 1 and Phase 2. - Boundary markers: The skill does not define explicit delimiters or use "ignore embedded instructions" warnings when passing source content to the
Tasktool for specialist agents. - Capability inventory: The skill has the ability to write to the filesystem (
Write,Edit) and delegate work to other agents (Task). - Sanitization: There is no evidence of content validation, escaping, or sanitization of the text extracted from the project documents before it is processed by the AI models.
Audit Metadata