end-skill
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading content from local project files that are subsequently used to influence agent behavior.
- Ingestion points: The skill uses
fast_read_fileto ingest content fromactiveContext.mdandprogress.mdinSKILL.md. - Boundary markers: Absent; there are no explicit instructions to the agent to treat the file content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill possesses file-write capabilities (
fast_write_file) and search capabilities (fast_search_files) across the project directory as defined inSKILL.md. - Sanitization: No content validation or sanitization is performed on the data read from the Memory Bank files before it is processed.
- [COMMAND_EXECUTION]: The skill performs file system operations using absolute paths within a specific project directory.
- Evidence: Operational instructions specify the use of
fast_read_fileandfast_write_fileon paths under/home/kidpixel/render_signal_server-main/.
Audit Metadata