agile-product-owner
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script located at scripts/user_story_generator.py to automate the generation of user stories and sprint plans. This represents a significant capability within the skill environment.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted user requirements to generate output. 1. Ingestion points: User-provided product goals and requirements enter the context in SKILL.md and README.md. 2. Boundary markers: No delimiters or isolation instructions are present to mitigate embedded instructions. 3. Capability inventory: Execution of scripts/user_story_generator.py. 4. Sanitization: No sanitization or validation of external text is described before processing.
Audit Metadata