validation-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided documents (Step 1: Read the target document) to perform validation and scoring. Maliciously crafted content within these documents could potentially influence the agent's behavior during the assessment process.
- Ingestion points:
SKILL.md(Step 1) specifies reading the target document. - Boundary markers: None identified in the skill instructions to separate the document content from the agent's logic.
- Capability inventory: Access to the
Readtool and thememorytool for storing outcomes. - Sanitization: No explicit sanitization or validation of the input document's text content is specified before processing.
- [DYNAMIC_EXECUTION]: The skill's core execution logic is delegated to an external script file located at
.claude/helpers/validation-pipeline.cjs. - Evidence:
SKILL.mdstates: "Uses .claude/helpers/validation-pipeline.cjs with 13 requirements validation steps" and "The pipeline helper ... handles execution".
Audit Metadata