ketchup
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from various external sources, which is a potential surface for indirect prompt injection.
- Ingestion points: The skill reads chat history, reports from subagents, Pull Request statuses, and CI run results (SKILL.md).
- Boundary markers: The instructions do not include specific delimiters or 'ignore' instructions for the ingested content to prevent execution of embedded instructions.
- Capability inventory: The skill is limited to generating text summaries and visual diagrams (Mermaid, /visualize tool). It lacks capabilities for file writing, system command execution, or network exfiltration.
- Sanitization: No sanitization or validation steps are defined for the input data.
Audit Metadata