grill-me
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content and user-provided designs to generate interview questions and project documentation, creating a surface for indirect prompt injection.\n
- Ingestion points: The skill ingests the user's plan, repository codebase, and other artifacts to use as evidence for questioning (SKILL.md).\n
- Boundary markers: The instructions lack explicit delimiters or instructions to the agent to ignore embedded prompts within the analyzed files or artifacts.\n
- Capability inventory: The skill allows for the creation of local Markdown files based on the synthesized information from the artifacts (SKILL.md).\n
- Sanitization: No explicit sanitization or validation of the content extracted from external artifacts is mentioned.
Audit Metadata