test-ml-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill monitors and processes data from local project files to determine its routing logic, creating a vulnerability surface for instructions embedded in file metadata or content. * Ingestion points: The skill reads the status field from
journal/NN_<short_name>.mdand uses theNN_<short_name>stem from the filesystem to construct test filenames. * Boundary markers: Absent; the instructions rely on the LLM's ability to locate and interpret the 'approved' status within the design note markdown. * Capability inventory: The skill can create new files in thetests/directory and dispatch control to other specialized subskills. * Sanitization: The skill does not explicitly define sanitization for the stem strings or the contents of the journal files being processed.
Audit Metadata