audit
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest and analyze untrusted external data from project-specific files, such as
PRODUCT.md,DESIGN.md, and.impeccable.md, which could potentially contain malicious instructions. - Ingestion points: The agent is instructed to read design context and project documentation files from the repository to inform its audit.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential prompts embedded within the ingested files.
- Capability inventory: The skill's functionality is limited to generating a text-based diagnostic report and recommending other commands; it does not perform file modifications, network requests, or sensitive system operations.
- Sanitization: There are no explicit steps for sanitizing or validating the content read from the external files before processing.
Audit Metadata