acceptance-criteria
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of documentation and templates in Markdown format. There are no scripts (Python, Node.js, Shell) or binaries included in the package.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external PRD documents to generate output.
- Ingestion points: The
inputfield inSKILL.mdspecifies PRD documents as the primary data source. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore instructions embedded within the ingested content.
- Capability inventory: The skill possesses no tools, subprocess calls, network operations, or file-writing capabilities.
- Sanitization: There is no explicit sanitization or validation logic for the input text. Given the complete absence of any executable capabilities or system-level tools, the ingestion of untrusted data represents a theoretical attack surface only and does not pose a functional security risk.
Audit Metadata