recoup-internal-consulting-ip-register-updater
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on project files which may contain untrusted content, potentially allowing for indirect prompt injection attacks.
- Ingestion points: The skill instructions direct the agent to process data from workspace files including
AGENTS.mdandDESIGN.md(SKILL.md). - Boundary markers: The instructions lack explicit delimiters or specific warnings to ignore embedded commands within the ingested project content.
- Capability inventory: The agent is instructed to perform file-write operations to record asset data in the IP register located under
business/legal/. - Sanitization: No sanitization or validation logic is defined for the input data processed from the workspace files.
Audit Metadata