edge-strategy-designer
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from an external YAML file and incorporates it into generated strategy drafts.\n
- Ingestion points: The
load_conceptsfunction inscripts/design_strategy_drafts.pyreads data from a user-providededge_concepts.yamlfile.\n - Boundary markers: The output YAML files do not implement boundary markers or instructions for downstream agents to disregard embedded content.\n
- Capability inventory: The script performs file system write operations via
Path.write_textinscripts/design_strategy_drafts.pyto save the generated drafts.\n - Sanitization: While the script uses
sanitize_identifierfor IDs, free-text fields such asthesisandrepresentative_conditionsare included in the output without specific filtering for malicious instructions.
Audit Metadata