aiox-po
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script using Node.js as part of its activation protocol.
- Evidence:
node .aiox-core/development/scripts/generate-greeting.js poinSKILL.md. - Context: This is a project-specific script used to generate a greeting for the Product Owner persona.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project artifacts and user-provided story files which could contain instructions intended to influence agent behavior.
- Ingestion points: Reads files from
docs/stories/and.aiox-core/development/agents/po.md. - Boundary markers: None explicitly defined to separate data from instructions.
- Capability inventory: Executes a local JavaScript greeting generator via
node. - Sanitization: No explicit sanitization of input data from project files is mentioned.
Audit Metadata