discover-journey-map
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and process untrusted external content.
- Ingestion points: The skill reads research signal including interview transcripts, survey results, and customer support tickets (SKILL.md).
- Boundary markers: The skill lacks explicit instructions for the agent to use delimiters or ignore embedded instructions within the ingested research data.
- Capability inventory: The skill's capabilities are limited to generating markdown artifacts and Mermaid diagrams; it does not have access to subprocess execution, file-writing, or network operations.
- Sanitization: There is no mention of sanitizing or escaping the external content before it is interpolated into the journey map artifact.
Audit Metadata