gsp-scope-profile
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from local markdown files to generate project artifacts, which provides a surface for indirect instructions.
- Ingestion points: The skill reads content from
project-state.md,requirements.md, andquality-target.mdas specified inSKILL.md. - Boundary markers: The instructions in
SKILL.mddo not provide delimiters or instructions to ignore potentially malicious embedded content within the source files. - Capability inventory:
SKILL.mdincludes instructions for the agent to write todocs/game-studio/scope-profile.md, but lacks higher-risk capabilities such as network access or shell command execution. - Sanitization: No sanitization or validation of the ingested markdown content is performed before processing.
Audit Metadata