identify-assumptions-new

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data provided by the user in the form of product concepts and uploaded files.
  • Ingestion points: SKILL.md processes text via the $ARGUMENTS variable and instructs the agent to read user-provided files such as business plans or research documents.
  • Boundary markers: The instructions lack specific delimiters or "ignore embedded instructions" warnings to prevent the model from obeying instructions hidden within the user-provided files.
  • Capability inventory: The skill's primary capability is information processing and generating markdown files.
  • Sanitization: There is no evidence of data sanitization or validation performed on the external content before it is processed by the AI.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:45 AM