01-client-brief
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and does not include any executable scripts, binary files, or external dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted client responses from a questionnaire. However, the risk is minimal as the skill only generates markdown text and does not have capabilities for network exfiltration, file system modification, or command execution.
- Ingestion points: Client responses to the questionnaire sections defined in Part A of SKILL.md.
- Boundary markers: Absent; the instructions do not specify delimiters or warnings to ignore embedded instructions in user input.
- Capability inventory: The skill is limited to generating formatted Markdown text outputs.
- Sanitization: Absent; no explicit instructions are provided to sanitize or validate client input.
Audit Metadata