nba
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local environment, such as git history, file changes, and documentation. This constitutes a potential surface for indirect prompt injection.
- Ingestion points: Reads git/file changes, QA evidence, and project notes as described in the workflow (SKILL.md).
- Boundary markers: None identified.
- Capability inventory: The skill is explicitly read-only and does not execute actions or access network tools.
- Sanitization: No specific sanitization or filtering of input data is described.
- [DATA_EXFILTRATION]: The skill accesses project-related metadata and file content to determine project status. However, there are no network communication tools, external URLs, or exfiltration patterns detected; the data remains within the local context.
Audit Metadata