rota-brainstorm
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including backlog items, glossary terms, and project files, which constitutes an indirect prompt injection surface.\n
- Ingestion points: Context is loaded from external backends via
rota item show <ID>,rota glossary read <term>, and the protocols inreferences/context-load-protocol.md.\n - Boundary markers: The skill mentions
DECISIONScomments as hard boundaries for conflicts but does not specify robust delimiters for general ingested text.\n - Capability inventory: The skill can execute commands that write to the project backend, specifically
rota design add,rota design put, androta item comment add.\n - Sanitization: No sanitization or escaping protocols are defined for the data retrieved from external sources before it is used in design drafts.\n- [COMMAND_EXECUTION]: The skill utilizes a series of CLI commands through the
rotatool to manage the design process. These commands interact with the project's backend to resolve items, load details, and store approved documentation.
Audit Metadata