theme-roadmapping
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external files (
okr_input,vision_input) and information retrieved via web research (WebSearch/WebFetch mixins). This creates a surface for indirect prompt injection where malicious instructions embedded in those external sources could influence the agent's behavior. - Ingestion points: Reads content from file paths provided in
okr_inputandvision_input, and fetches data from the web in Phase 2. - Boundary markers: The skill lacks explicit instructions to treat imported content as data only or to ignore embedded instructions within those files.
- Capability inventory: The skill has the capability to read local files and perform network operations via mixins.
- Sanitization: There is no evidence of content sanitization or validation for the imported data.
Audit Metadata