08-requirements-management
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted markdown files from project directories to generate baseline inventories and change control records.
- Ingestion points: The skill instructions in
SKILL.md(Step 1) require reading all*.mdartifacts inprojects/<ProjectName>/<phase>/<document>/, as well asvision.mdandstakeholder_register.md. - Boundary markers: The skill lacks explicit instructions for the agent to use delimiters or specific warnings to ignore instructions that might be embedded within the requirement identifiers or descriptions being processed.
- Capability inventory: The skill utilizes file system read, search, and write capabilities to process input artifacts and generate the
requirements_baseline.mdandchange_control_process.mdoutputs. - Sanitization: There is no evidence of validation or sanitization of the content extracted from the markdown files before it is processed or written to output files.
Audit Metadata