comet-design
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project artifacts to drive its design logic and state updates. \n- Ingestion points: Both SKILL.md and reference/compat.md instruct the agent to read proposal.md, design.md, tasks.md, and delta specs (specs/**/spec.md) to establish context for the design phase. \n- Boundary markers: The instructions do not specify the use of delimiters or warnings to prevent the agent from following instructions embedded within these external files. \n- Capability inventory: The skill is capable of executing comet CLI commands for state management and writing/updating files such as design.md and brainstorm-summary.md. \n- Sanitization: There is no explicit requirement for the agent to sanitize or validate the content of the read files before using it to generate proposals or technical decisions.
Audit Metadata