project-status-report
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-generated content from external boards and item updates, which represents a potential attack surface.
- Ingestion points: Untrusted data is ingested through the
get_board_items_pageandget_updatestools in SKILL.md. - Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded commands within the fetched board content.
- Capability inventory: The skill is limited to a narrow toolset for data retrieval and UI rendering (
show-chart,show-table,show-battery); it lacks high-risk capabilities such as file system write access, arbitrary network requests, or shell command execution. - Sanitization: There are no explicit requirements for sanitizing or validating the text content of board items or comments before they are processed by the agent.
Audit Metadata