mb-review
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the
.memory-bank/directory to facilitate its review process, creating an attack surface for indirect prompt injection. - Ingestion points: The contents of the
.memory-bank/directory (SKILL.md) are read and analyzed by multiple specialized subagents. - Boundary markers: The skill does not implement explicit delimiters or instructions to ignore embedded commands within the files being reviewed.
- Capability inventory: The skill has the capability to spawn additional subagents and perform file-write operations to the
.tasks/TASK-MB-REVIEW/directory. - Sanitization: No sanitization, validation, or filtering of the input project files is described in the skill's process.
Audit Metadata