tool-design-sprint-brief
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a standard project management and documentation tool for generating Design Sprint briefs. It does not include any executable scripts, hardcoded credentials, network exfiltration, or persistence mechanisms. All external references are to well-known services or the author's official resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted inputs. Evidence Chain: 1. Ingestion points: The skill accepts 'challenge description', 'founding hypothesis', and 'readiness verdict' as primary inputs in SKILL.md. 2. Boundary markers: None identified; inputs are interpolated directly into the brief sections. 3. Capability inventory: None; the skill is limited to generating markdown text output and lacks network access, file write capabilities, or command execution tools. 4. Sanitization: None identified. This surface is evaluated as safe because the skill lacks the capabilities required to execute a malicious payload.
Audit Metadata