monitoring-and-evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown files providing guidance on Monitoring and Evaluation (M&E) practices. It contains no executable scripts, shell commands, or network exfiltration patterns. All external references are to well-known development organizations or methodology textbooks.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external project documentation, which is a potential surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through inputs such as Terms of Reference (ToR), donor frameworks, and client records as specified in the Workflow section of
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded in the source documents.
- Capability inventory: The agent's capabilities are focused on generating structured M&E frameworks and indicator reference sheets.
- Sanitization: The skill does not prescribe sanitization or validation routines for the external content it processes.
Audit Metadata