async-instead
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data (meeting descriptions, team maturity details, and failure history) to generate conversion designs.
- Ingestion points: Required Inputs section in
SKILL.md. - Boundary markers: The skill does not define specific delimiters for user-provided context.
- Capability inventory: The skill has no tool-use capabilities, file-system access, or network permissions.
- Sanitization: No explicit sanitization of input data is performed.
- Assessment: Although a surface for indirect prompt injection exists, the lack of executable capabilities makes this a low-risk, informational concern.
- [NO_CODE]: The skill consists entirely of Markdown instructions and metadata. It does not contain or execute any scripts, binaries, or shell commands.
Audit Metadata