project-goal
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted repository content, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill reads
README.md,CONTRIBUTING.md, package manifests, config files, and source code files as specified in the discovery guidance inSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to isolate the untrusted file content from its internal instructions.
- Capability inventory: The skill has permissions to read repository files and write to the
<project-root>/GOAL.mdfile, as defined inSKILL.md. - Sanitization: The instructions do not define any sanitization, filtering, or validation logic for the content retrieved from the repository files before it is processed by the agent.
Audit Metadata