foundation-okr-writer
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data provided by the user (such as existing OKR drafts, features, and roadmaps) and has the capability to persist this information into a local memory file. * Ingestion points: User-supplied OKR drafts and strategic contexts (SKILL.md). * Boundary markers: Absent; the instructions do not require the use of delimiters or 'ignore' instructions for external data. * Capability inventory: The skill specifies read/write access to .claude/pm-skills.local.md to maintain project memory (SKILL.md). * Sanitization: Absent; there are no instructions for validating or escaping user-provided data before it is written to the local memory file.
Audit Metadata