skills/synkraai/aiox-core/aiox-po/Gen Agent Trust Hub

aiox-po

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local script using Node.js as part of its activation protocol.
  • Evidence: node .aiox-core/development/scripts/generate-greeting.js po in SKILL.md.
  • Context: This is a project-specific script used to generate a greeting for the Product Owner persona.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external project artifacts and user-provided story files which could contain instructions intended to influence agent behavior.
  • Ingestion points: Reads files from docs/stories/ and .aiox-core/development/agents/po.md.
  • Boundary markers: None explicitly defined to separate data from instructions.
  • Capability inventory: Executes a local JavaScript greeting generator via node.
  • Sanitization: No explicit sanitization of input data from project files is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:59 PM