interview-me
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill collects user input through an interactive interview and incorporates it into a 'Statement of Intent' that can be saved to a file. This creates a surface where malicious user input could be stored and potentially influence subsequent agent actions when the file is read by other skills.\n
- Ingestion points: User responses provided during the multi-turn interview process defined in Step 2 and Step 3 of SKILL.md.\n
- Boundary markers: The skill uses a structured restate template in Step 4, but does not provide instructions to the agent to escape or sanitize user-provided strings within that structure.\n
- Capability inventory: The skill includes the capability to write the confirmed intent to the file system at 'docs/intent/[topic].md'.\n
- Sanitization: There are no instructions for sanitizing or validating user input before it is written to the intent document or passed to downstream skills like 'spec-driven-development'.
Audit Metadata