apex
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external sources and output generated content to integrated collaboration platforms, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill utilizes
WebSearch,WebFetch, and theContext7 MCP(mcp__context7__query-docs) to retrieve documentation and market research from the internet and external libraries (SKILL.md). - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat external content as untrusted or to ignore instructions embedded within the fetched data.
- Capability inventory: The skill has the capability to write to the project repository (
retrospectives/mkt-retro.md), create or update Confluence pages, and post comments to Jira tickets (SKILL.md). - Sanitization: No explicit sanitization or validation steps are defined for the data retrieved via web tools or documentation lookup before it is processed or used to generate outputs.
Audit Metadata