pm-initiate-stakeholder-map
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a structured prompt for project management documentation. It contains no executable scripts, shell commands, or network requests.
- [DATA_EXPOSURE]: The skill references reading
.agents/project-context.mdand other project-related notes. This is consistent with its stated purpose of stakeholder mapping and does not involve access to sensitive system directories or credentials. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by processing external project data.
- Ingestion points: Reads
.agents/project-context.md, kickoff notes, and meeting records in Steps 1 and 2. - Boundary markers: No specific delimiters or safety warnings are used to isolate ingested data from the agent's instructions.
- Capability inventory: The skill has no capabilities to execute code, write files, or communicate over the network.
- Sanitization: No data validation or sanitization is performed on the ingested content.
- Risk Assessment: Due to the complete absence of dangerous capabilities (no network, file-write, or shell access), the risk associated with this ingestion surface is negligible.
Audit Metadata