senior-pm-enterprise
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Identified an indirect prompt injection surface where the agent processes external project data. * Ingestion points: Reads from assets/sample_project_data.json and user-provided JSON files. * Boundary markers: Absent; the skill does not specify delimiters or instructions to disregard potential commands within data fields. * Capability inventory: The agent executes local Python scripts to calculate metrics and generates executive-level reporting summaries. * Sanitization: Absent; no explicit sanitization or escaping of data retrieved from external files is described.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (e.g., scripts/risk_matrix_analyzer.py) to perform quantitative analysis. These are expected components of the skill's operational assets.
- [SAFE]: Analysis of the metadata and instructions revealed no hardcoded credentials, data exfiltration attempts, or obfuscated content.
Audit Metadata