the-council
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including 'hook verdicts', 'failures checks', and 'user feedback' provided as input. There are no explicit boundary markers or instructions to sanitize or ignore malicious commands embedded within this feedback. However, since the skill has no access to sensitive tools, network operations, or file system modifications, the impact is limited to the quality and safety of the generated text output.
Audit Metadata