tool-design-sprint-prototype-plan

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes user-provided inputs like storyboards to generate structured interview scripts.
  • Ingestion points: storyboard and sprint questions are identified as inputs in SKILL.md.
  • Boundary markers: The instructions lack explicit delimiters or instructions for the agent to ignore command-like text within the ingested data.
  • Capability inventory: The skill uses these inputs to generate a planning artifact, which includes writing tasks for an interview script.
  • Sanitization: The instructions do not include steps for sanitizing or validating the ingested content before it is processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 09:57 PM