ai-readiness-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The assessment workflow involves ingesting and analyzing untrusted external data, including business documentation and source code, which could contain malicious instructions intended to manipulate the agent's output or behavior.
- Ingestion points: Document review and codebase analysis (Phase 1 of methodology.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded prompts are provided in the workflow.
- Capability inventory: The skill is permitted to use Write, Bash, and WebFetch tools.
- Sanitization: There are no documented steps for validating or escaping content retrieved from external sources before it is processed.
- [COMMAND_EXECUTION]: The methodology instructs the agent to perform 'Codebase Analysis' using the Bash tool. Executing shell commands to explore or analyze untrusted local directory structures or code repositories presents an inherent risk if the environment contains maliciously crafted file names or structures.
Audit Metadata