interview-me

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized command execution were detected within the skill file.
  • [NO_CODE]: The skill consists purely of natural language instructions (markdown) designed to guide the AI agent's behavior during interactive sessions. It does not include any scripts, binaries, or automated shell commands.
  • [EXTERNAL_DOWNLOADS]: The skill references a public GitHub repository (addyosmani/agent-skills) for its source documentation and MIT license. These references are documented neutrally and originate from a well-known community source.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves a workflow that ingests user input through an interview process and allows for that input to be persisted to the local file system.
  • Ingestion points: User responses during the interactive interview are captured and restated by the agent in the SKILL.md (Step 4).
  • Boundary markers: The skill does not explicitly define markers or delimiters to isolate user-provided data from the rest of the agent's instructions.
  • Capability inventory: The skill instructs the agent to offer to save the final confirmed intent to a local file path (docs/intent/[topic].md).
  • Sanitization: No explicit sanitization or escaping of user input is specified before the content is written to a file or re-processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:51 AM