proposal-generation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed of natural language instructions for a text-based workflow. It contains no executable scripts, shell commands, or requests for sensitive system permissions.- [INDIRECT_PROMPT_INJECTION]: The skill processes external documents such as RFPs and requirements provided by the user. While this creates a theoretical surface for indirect prompt injection, the lack of high-privilege tools minimizes any security risk.
- Ingestion points: User-provided RFP documents and requirements lists.
- Boundary markers: None explicitly mentioned in the instructions.
- Capability inventory: The skill is limited to text generation; it does not request file-system or network-execution tools.
- Sanitization: No specific sanitization or filtering logic is defined within the skill.
Audit Metadata