oss-sponsors-fundraising
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of educational material and strategic frameworks for open-source software sustainability. It provides templates for outreach and examples of sponsorship structures without including executable code or dangerous system modifications.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection via user-provided responses during the interview phase.
- Ingestion points: User input collected through the 12-question interview process in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are defined for the interpolation of user responses into subsequent prompts.
- Capability inventory: The skill utilizes local file writing to 'devrel-context.md' for state persistence (SKILL.md) and suggests routing logic to other skills.
- Sanitization: No explicit sanitization or validation of user-supplied data is documented before processing or storage.
Audit Metadata