create-project-context
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its reliance on external, untrusted data for generating documentation.\n
- Ingestion points: The skill reads and processes content from
it_{iteration}_product-requirement-document.md,it_{iteration}_PRD.json, andAGENTS.md(SKILL.md).\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to isolate or ignore potentially malicious instructions embedded within the ingested files.\n
- Capability inventory: The skill possesses file-writing capabilities, specifically for
.agents/PROJECT_CONTEXT.md,.agents/PROJECT_CONTEXT_archive.md, andstate.json(SKILL.md).\n - Sanitization: The skill does not implement validation or sanitization of the content extracted from external files before it is written to the project's context documentation.
Audit Metadata