set-theory-for-projects
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it is designed to ingest and analyze untrusted external data, including project files, issue trackers, and maintainer statements (as specified in the 'Run Bounded Discovery' section of SKILL.md).
- Ingestion points: Project files, source repositories, issue trackers, release notes, and maintainer statements.
- Boundary markers: The skill does not define specific prompt delimiters or instructions to ignore embedded instructions within these sources.
- Capability inventory: The skill is restricted to reading data and generating a conversational 'Discovery Report'. It does not perform file writes, network exfiltration, or shell execution based on the processed data.
- Sanitization: No explicit sanitization or filtering of external content is defined.
- Context: The risk is considered minimal and inherent to the skill's primary purpose of project analysis.
Audit Metadata