sociuu-qa-guide
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from a 'QA Runbook' to generate developer guides.
- Ingestion points: The skill reads data from task descriptions, attachments, and the QA Runbook via the
sociuu-tasktool, and environment status viasociuu-dock. - Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its own system instructions and potentially malicious instructions embedded within the untrusted QA Runbook data.
- Capability inventory: The skill has the capability to execute shell commands (via
sociuu-dock) and write data back to task management systems (viasociuu-task). - Sanitization: The instructions do not include any steps for sanitizing, escaping, or validating the input data retrieved from the external runbooks before it is used to shape the guide or stored back in the task system.
Audit Metadata