apply-asd-ste100
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely focused on documentation review and linguistic standardization. It does not contain executable scripts or request dangerous permissions.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to the official ASD-STE100 Issue 9 PDF on the authoritative organization's website (asd-ste100.org). This is a standard reference for the technical specifications the skill implements.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to process untrusted technical documentation provided by users.
- Ingestion points: User-supplied technical documentation intended for review or revision as described in
SKILL.mdworkflows. - Boundary markers: Absent; the instructions do not specify delimiters to isolate the text being analyzed from the agent's instructions.
- Capability inventory: Limited to text analysis and generation. No shell access, network exfiltration, or sensitive file system operations are requested or utilized.
- Sanitization: None; the skill relies on the underlying model's safety guardrails when processing potentially adversarial content within documentation.
Audit Metadata