git-pr-workflows-onboard
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided context via the
$ARGUMENTSplaceholder to generate personalized onboarding plans. - Ingestion points: The
Requirementssection inSKILL.mdparses role details, start dates, and technical requirements from$ARGUMENTS. - Boundary markers: None explicitly defined for the interpolation of
$ARGUMENTS. - Capability inventory: No active capabilities such as subprocess execution, network operations, or file writing are present in the skill's instructions.
- Sanitization: The skill relies on natural language parsing and does not include explicit data validation, though the risk is negligible given the lack of executable capabilities.
Audit Metadata