write-roadmap
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided materials and repository files to generate roadmaps, creating an ingestion surface for untrusted data.
- Ingestion points: Material and repository evidence inspected by the agent during the 'Ground the Roadmap' phase.
- Boundary markers: The instructions lack explicit delimiters or warnings to disregard potential instructions embedded in the source documents.
- Capability inventory: The skill includes instructions to create, update, and delete markdown files within the docs/roadmaps/ directory.
- Sanitization: There are no documented steps for sanitizing or validating the input data before it is used to influence the agent's output.
Audit Metadata