simready-foundation-update-profile
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a functional surface for processing repository data, which is inherent to its profile maintenance tasks.
- Ingestion points: The skill reads TOML files located in
nv_core/tiers/simready_foundation_tier_core/simready/foundation/tier_core/profiles/and various feature JSON manifests as described in SKILL.md. - Boundary markers: There are no specific instructions or delimiters defined to ignore potential instructions embedded within the processed configuration files.
- Capability inventory: The skill is authorized to perform file system modifications (updating TOML/Markdown) and execute local validation commands.
- Sanitization: The instructions do not specify sanitization or filtering of the content read from external manifests or configurations before processing.
- [COMMAND_EXECUTION]: The skill includes instructions to run local validation tools, specifically
workspace validateorsimready-validate, to verify the integrity and consistency of the profile updates.
Audit Metadata