specialist-project-management-project-management-experiment-tracker

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates raw user input into the prompt of a spawned sub-agent, creating a surface for potential instruction override.
  • Ingestion points: The {the_user_question} variable within the Agent tool prompt in SKILL.md serves as the entry point for untrusted data.
  • Boundary markers: The skill does not employ boundary markers, delimiters, or specific instructions to the agent to disregard potential commands within the user's input.
  • Capability inventory: The skill utilizes the Agent tool to spawn and instruct sub-agents based on the provided template.
  • Sanitization: There is no evidence of input validation, escaping, or sanitization to prevent malicious instructions from being executed by the sub-agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 08:50 PM
Security Audit — agent-trust-hub — specialist-project-management-project-management-experiment-tracker