specialist-project-management-project-management-studio-operations

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill uses the Agent tool to spawn a sub-agent and interpolates user input directly into the instruction block, creating a surface for indirect prompt injection.
  • Ingestion points: The variable '{the_user_question}' at the end of the Agent tool call in SKILL.md.
  • Boundary markers: Absent; the user-supplied text is concatenated to the preceding system instructions without escape characters, delimiters, or warning labels.
  • Capability inventory: Spawns the 'asa:project-management:Studio-Operations' sub-agent, which is granted operational management and resource coordination capabilities.
  • Sanitization: None identified; the agent takes the user input raw and presents it to the sub-agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 08:50 PM
Security Audit — agent-trust-hub — specialist-project-management-project-management-studio-operations