progressive-estimation
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external task descriptions and data from third-party tools like JIRA and GitHub, which introduces a surface for indirect prompt injection where malicious instructions could be embedded in the ingested data.
- Ingestion points: Processes user-provided task descriptions, JIRA tickets, and GitHub issues.
- Boundary markers: The skill does not define explicit delimiters or security instructions for the agent to ignore potentially malicious commands within the external data.
- Capability inventory: The skill is strictly instructional and does not possess tools for file system modification, network exfiltration, or arbitrary code execution.
- Sanitization: No sanitization or data validation logic is present in the skill instructions.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized credential access were detected. The skill uses standard instructional logic and references public documentation repositories for project management research.
Audit Metadata