tracer-interview-me
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local documentation files to establish the initial state and context of the design interview. This ingestion of untrusted data from the codebase creates a surface for indirect prompt injection.\n
- Ingestion points: Reads CONTEXT.md, CONTEXT-MAP.md, and Markdown files within the docs/adr/ directory (specified in SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the ingested documentation as untrusted data or to ignore embedded instructions.\n
- Capability inventory: The skill possesses the ability to write to the filesystem (CONTEXT.md, docs/adr/) and perform environment discovery using sub-agents.\n
- Sanitization: The instructions do not include steps to sanitize, escape, or validate the content of the documentation files before they are processed by the agent.
Audit Metadata