tool-design-sprint-prototype-plan
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes user-provided inputs like storyboards to generate structured interview scripts.
- Ingestion points:
storyboardandsprint questionsare identified as inputs inSKILL.md. - Boundary markers: The instructions lack explicit delimiters or instructions for the agent to ignore command-like text within the ingested data.
- Capability inventory: The skill uses these inputs to generate a planning artifact, which includes writing tasks for an interview script.
- Sanitization: The instructions do not include steps for sanitizing or validating the ingested content before it is processed.
Audit Metadata