standards-task

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs legitimate documentation tasks within the local project scope. It reads project specifications and writes analysis drafts and architectural rules to the local documentation directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project documentation to generate new rules and drafts. 1. Ingestion points: Reads docs/product/business-flow.md, docs/standards/tech-stack-rule.md, docs/standards/directory-rule.md, and docs/standards/tools-rule.md in Step 1 and Step 3.2. 2. Boundary markers: None present; the skill interpolates the file contents directly into the analysis prompt context. 3. Capability inventory: File read access, directory creation (mkdir -p), and file write access to the docs/standards/ directory. 4. Sanitization: None identified. The skill generates static markdown documentation which poses a low risk of execution or escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 02:49 PM
Security Audit — agent-trust-hub — standards-task