decision-map
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from the repository and external research to generate documentation, creating a surface for indirect prompt injection.
- Ingestion points: The agent reads repository instructions, domain architecture records, and external evidence during the charting and resolution phases (SKILL.md).
- Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions embedded in external content.
- Capability inventory: The skill is authorized to create and write Markdown files within the docs and decisions directories of the repository (SKILL.md).
- Sanitization: No sanitization or escaping of ingested external content is specified before it is written to the repository documents.
Audit Metadata