quality-gate-design
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external release gate evidence and quality metrics, creating a potential attack surface for indirect prompt injection where malicious instructions could be embedded in release data.
- Ingestion points: The skill ingests user-supplied quality gate criteria, constraints, results, and evidence files as described in
SKILL.mdandprompts/quality-gate-design.md. - Boundary markers: The instructions mandate an "Input Audit" (Step 2 in
prompts/quality-gate-design.md) to record known, missing, and conflicting data, and require the explicit separation of facts from inferences, recommendations, and human decisions. - Capability inventory: The skill's primary capability is generating analytical Markdown reports. It does not contain instructions to write files or perform network operations within its own logic, though it operates in an environment with default agent tool access.
- Sanitization: Prompt instructions in
prompts/quality-gate-design.mdexplicitly mandate the use of "least privilege, masked data, mocks, dry runs, or isolation" when performing security-sensitive or production analysis.
Audit Metadata