02-definition-of-done
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external project documentation to customize the checklist, creating a potential surface for instructions hidden within project files to influence the output document.
- Ingestion points: The skill reads
quality_standards.mdandtech_stack.mdfrom the_context/directory inSKILL.mdandlogic.prompt. - Boundary markers: The prompt logic does not utilize explicit delimiters or 'ignore' instructions to encapsulate the ingested project context.
- Capability inventory: The skill is limited to file system read access for context and file system write access for generating the
Definition_of_Done.mddocument. - Sanitization: No explicit sanitization or validation of the ingested markdown content is performed before it is processed by the generation logic.
Audit Metadata