mino-core
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines architectural policies and YAML schemas for tracking design decisions and evidence. No executable scripts, network operations, or sensitive file access patterns were identified in the files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as requirements and design artifacts. 1. Ingestion points: Natural language requirements and caller artifacts specified in SKILL.md and requirements-and-traceability.md. 2. Boundary markers: Present; guidelines in shared-policies.md warn against treating data as commands. 3. Capability inventory: The skill defines data structures for commands but lacks execution tools in its own agent configuration. 4. Sanitization: Present; platform-compatibility.md requires quoting path arguments and forbids shell string concatenation.
Audit Metadata