use-cases-page-generator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read data from external project files, which creates a potential surface for indirect instructions to influence agent behavior.
- Ingestion points: The skill explicitly directs the agent to read
.claude/project-context.mdor.cursor/project-context.mdfor product and ICP (Ideal Customer Profile) information in the 'Initial Assessment' section ofSKILL.md. - Boundary markers: There are no instructions provided to the agent to treat the content of these files as untrusted or to ignore any embedded instructions within them.
- Capability inventory: The skill itself is purely instructional for text generation and does not possess capabilities for network operations, file writing, or command execution.
- Sanitization: The skill does not include any validation or sanitization steps for the data ingested from the project context files.
Audit Metadata