skills/rpamis/comet/comet-design/Gen Agent Trust Hub

comet-design

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project artifacts to drive its design logic and state updates. \n- Ingestion points: Both SKILL.md and reference/compat.md instruct the agent to read proposal.md, design.md, tasks.md, and delta specs (specs/**/spec.md) to establish context for the design phase. \n- Boundary markers: The instructions do not specify the use of delimiters or warnings to prevent the agent from following instructions embedded within these external files. \n- Capability inventory: The skill is capable of executing comet CLI commands for state management and writing/updating files such as design.md and brainstorm-summary.md. \n- Sanitization: There is no explicit requirement for the agent to sanitize or validate the content of the read files before using it to generate proposals or technical decisions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:18 AM