ce-strategy
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a document generator that manages product strategy metadata within the repository. It does not perform network operations, execute arbitrary code, or access sensitive system credentials.\n- [SAFE]: The skill references other suite-related skills (ce-ideate, ce-brainstorm, ce-plan) as downstream consumers of the generated document, which is a standard functional behavior for repository-grounded agents.\n- [SAFE]: Indirect Prompt Injection analysis:\n
- Ingestion points: The skill reads the 'STRATEGY.md' file in SKILL.md (Phase 0 and Phase 2) to summarize or update its content.\n
- Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are present for the file read operation.\n
- Capability inventory: The skill is limited to reading and writing a specific markdown file ('STRATEGY.md') within the repository root.\n
- Sanitization: No explicit sanitization of the input file is performed, but the risk is mitigated by a human-in-the-loop interview process and a rigid output template ('references/strategy-template.md') that constrains the agent's behavior and prevents instruction persistence.
Audit Metadata