requirements-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill's operations are confined to reading local documentation and generating markdown reports.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from project files to generate requirements documents. 1. Ingestion points: Read operations in SKILL.md Step 1 target 'features.md', 'business_rules.md', and 'requirements_analysis_report.md'. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompt templates. 3. Capability inventory: The skill is capable of writing markdown documentation to the filesystem as seen in SKILL.md Step 7. 4. Sanitization: No sanitization or validation of the ingested text is performed before it is formatted into tables and diagrams. This represents a low-risk attack surface given the skill's primary function is documentation.
- [DATA_EXFILTRATION]: No network tools or exfiltration patterns were detected. All file access is scoped to the defined project directory structure.
- [PROMPT_INJECTION]: The skill instructions do not contain any overrides, safety bypasses, or instructions to ignore previous rules.
Audit Metadata