review-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a static analyzer for requirement documentation. It does not request any sensitive permissions, execute shell commands, or perform network requests. All identified behaviors align with the stated purpose of document review.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external documentation, which constitutes an ingestion point for untrusted data. However, the risk is classified as safe because the skill lacks the capabilities (such as network access, file writing, or command execution) that would be required to exploit an injection.
- Ingestion points: Requirement documents provided via the
input_schemaand local specification files referenced inSKILL.md. - Boundary markers: The instructions do not include specific delimiters or warnings to ignore instructions embedded within the requirements document.
- Capability inventory: The skill is restricted to reading documents and generating text findings; no dangerous tools, shell commands, or network operations are present.
- Sanitization: No input validation or sanitization routines are specified for the ingested content.
Audit Metadata