requirement-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied requirements and designs, which are ingestion points for potentially untrusted data.
- Ingestion points: User-provided requirements and stories in
prompts/requirement-gap-analysis.md. - Boundary markers: Lacks specific delimiters like
[START]/[END], but utilizes a structured output format and input audit phase. - Capability inventory: Limited to markdown generation; no network, file-write, or shell execution capabilities are defined for the agent during normal operation.
- Sanitization: Includes a mandatory audit step to evaluate input credibility and separate facts from assumptions.
- [SAFE]: The skill includes local Python (
evals/fixtures/check_domain_decisions.py) and Bash (evals/fixtures/check-domain-decisions.sh) scripts. These are part of the skill's own codebase and are used exclusively for automated verification of its output during development and evaluation, with no network access or sensitive data exfiltration capabilities.
Audit Metadata