gsp-project-audit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to audit external game project files, creating a vulnerability surface where malicious instructions could be embedded in the audited data.
- Ingestion points: Audited project source files and assets are processed during the audit workflow steps described in
SKILL.md. - Boundary markers: No specific delimiters or "ignore" instructions are provided to separate project data from agent instructions during processing.
- Capability inventory: The skill is configured to write audit findings to local documentation files, such as
docs/game-studio/audit/scorecard.json. - Sanitization: There are no instructions to sanitize or validate data ingested from the game project files before including it in the generated audit reports.
Audit Metadata