skills/peterbamuhigire/chwezi-sdlc-documentation/11-experience-mapping-requirements/Gen Agent Trust Hub
11-experience-mapping-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external research data, creating a surface for indirect prompt injection.
- Ingestion points: Workflow step 1 in
SKILL.mdrequires the agent to inspect 'Research evidence, personas, journey scope, touchpoints, emotions, pain points, and outcomes' from discovery sources. - Boundary markers: The instructions lack explicit delimiters or 'ignore embedded instructions' warnings to prevent the agent from following malicious commands hidden within the source research data.
- Capability inventory: The skill has the capability to write output files to the local file system at the path
projects/<ProjectName>/<phase>/<document>/experience_mapping_requirements.md. - Sanitization: There are no instructions for sanitizing, validating, or escaping the external content before it is interpolated into the final requirement document.
Audit Metadata