multi-perspective-review
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external data during the review process.
- Ingestion points: As defined in the 'Context Packet' section of 'references/current-guidance.md', the agent is instructed to collect user requests, changed files, and external documentation such as PRDs or ARDs.
- Boundary markers: The instructions do not explicitly specify the use of delimiters or 'ignore' instructions for the ingested data to prevent it from being interpreted as instructions by the agent.
- Capability inventory: The skill utilizes file system read capabilities and diagnostic tools like 'git status', 'git diff', 'git show', and 'rg' (ripgrep) as specified in 'references/current-guidance.md'.
- Sanitization: There is no evidence of explicit sanitization or validation of the content of the external files before they are processed by the LLM.
Audit Metadata