draft-experience
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it ingests data from external sources and incorporates it into the agent's context to generate output.
- Ingestion points: The skill reads
docs/<feature>/notes/*, project roadmaps, existing feature matrices, user guides, and the project's source code as described in the 'Inputs' and 'The small mode' sections. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the files it reads.
- Capability inventory: The skill is capable of writing documentation to the local filesystem (
docs/<feature>/EXPERIENCE.rev1.md) and its output serves as the basis for further technical planning and review by other skills (review-doc,draft-technical). - Sanitization: No explicit sanitization or filtering of the external content is mentioned in the instructions.
Audit Metadata