consulting-proposal
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns detected. The skill is composed entirely of natural language instructions for text generation and contains no executable code or system commands.
- [NO_CODE]: This skill consists exclusively of markdown instructions and does not include any scripts, executables, or configuration for external tools.
- [INDIRECT_PROMPT_INJECTION]: Analyzed for potential injection surface. 1. Ingestion points: The skill accepts user-provided input describing client problems and project details in SKILL.md. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present. 3. Capability inventory: The skill has no access to tools, network, or file system operations. 4. Sanitization: No input validation or escaping is performed on the provided data. Conclusion: Without exploitable capabilities, the injection surface presents no risk.
Audit Metadata