red-team-review
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted external documents such as PRDs, plans, or strategies, creating a surface where malicious instructions embedded in those documents could attempt to manipulate the agent's output.
- Ingestion points: The skill requests the artifact (plan, strategy, PRD) as a primary input in SKILL.md.
- Boundary markers: The prompt instructions do not employ delimiters or explicit directives to ignore embedded instructions within the analyzed artifact.
- Capability inventory: The skill is restricted to text analysis and generation; it does not utilize tools for network access, file system modification, or command execution.
- Sanitization: There is no evidence of input validation or sanitization for the provided artifact.
- [NO_CODE]: This skill consists entirely of natural language instructions and metadata in SKILL.md. It does not contain any executable scripts, compiled binaries, or configuration files that could perform automated actions on the host system.
Audit Metadata