eo-change
Pass
Audited by Gen Agent Trust Hub on May 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by reading and processing content from local module specification files and project configuration files.
- Ingestion points: The skill reads frontmatter and body content from
eo-doc/dev/<module-name>/spec.md, historical change files, and template files likeproject-profile.md. - Boundary markers: The instructions do not define explicit delimiters or instructions to ignore potential commands embedded within the documentation it reads.
- Capability inventory: The agent is authorized to perform file system read and write operations within the project directory to manage markdown documents. No network access or administrative shell execution is requested.
- Sanitization: The skill lacks mechanisms to sanitize or validate the content retrieved from specification files before it is processed by the agent.
Audit Metadata