01-sprint-planning
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project files that could contain malicious instructions.
- Ingestion points: Reads vision.md, prioritized_backlog.md, and user_stories.md as context for template generation as defined in logic.prompt and SKILL.md.
- Boundary markers: The instructions lack delimiters (such as XML tags or triple quotes) or specific directives telling the agent to treat the file content as data only and to ignore any instructions found within.
- Capability inventory: The skill has capabilities to read from the file system and write the Sprint_Planning_Template.md output file.
- Sanitization: No validation or sanitization is performed on the data extracted from the input files before it is used to generate the sprint goal and backlog sections.
Audit Metadata