skills/naimsolong/ai-software-agency/specialist-project-management-project-management-experiment-tracker/Gen Agent Trust Hub
specialist-project-management-project-management-experiment-tracker
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates raw user input into the prompt of a spawned sub-agent, creating a surface for potential instruction override.
- Ingestion points: The
{the_user_question}variable within theAgenttool prompt inSKILL.mdserves as the entry point for untrusted data. - Boundary markers: The skill does not employ boundary markers, delimiters, or specific instructions to the agent to disregard potential commands within the user's input.
- Capability inventory: The skill utilizes the
Agenttool to spawn and instruct sub-agents based on the provided template. - Sanitization: There is no evidence of input validation, escaping, or sanitization to prevent malicious instructions from being executed by the sub-agent.
Audit Metadata