oss-growth
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill is designed to process and edit external documentation, README files, and issue templates. While this is the intended purpose, these files could contain instructions that influence agent behavior if not handled with appropriate delimiters. The skill does not currently specify strict boundary markers for external content.
- [Local Data Storage]: The skill utilizes a local file path (
WIP/growth-strategy.md) that is explicitly excluded from version control via gitignore. This is used to maintain local tactical notes and growth strategies. While this keeps the data out of the repository, users should ensure that the local environment is secured as the skill treats this file as a single source of truth.
Audit Metadata