requirements-writer
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from several local documentation files, creating a surface where malicious instructions could be embedded in data to influence agent behavior.
- Ingestion points: The skill is instructed to check and read context from validation.md, background.md, SPEC.md, and requirements.md.
- Boundary markers: The instructions do not specify any delimiters or safety prompts to ensure the agent ignores potential instructions contained within these input files.
- Capability inventory: The skill's functionality is limited to conversational analysis and text generation; it does not utilize tools for network communication, file system modification, or arbitrary command execution.
- Sanitization: There is no evidence of sanitization or validation logic applied to the content of the ingested files before processing.
Audit Metadata