synthetic-user-testing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data from external, potentially untrusted sources, creating a surface for indirect prompt injection.
- Ingestion points: The process requires reading from
inclusive-personas,design-state.md, project design briefs, and the actual implementation build files. - Boundary markers: The instructions do not prescribe the use of clear delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: While the skill is a workflow guide, it operates within an environment where the agent likely has file-system and reporting capabilities.
- Sanitization: There is no mention of sanitizing or validating the content of the external files before the agent processes them as part of a persona simulation.
Audit Metadata