spec-from-conversation
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources such as Slack threads and meeting notes, which creates a potential surface for indirect prompt injection.
- Ingestion points: External conversations and meeting notes mentioned in the
descriptionandStep 1: read everything. - Boundary markers: The instructions do not include specific delimiters or instructions to the agent to disregard commands embedded within the input data.
- Capability inventory: The skill is purely instructional for text generation; it does not utilize tools for file system modification, network requests, or code execution.
- Sanitization: No explicit sanitization or validation of the input conversation text is specified.
Audit Metadata