Define Core
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user requests and external web search data (via Context7) to generate requirements documentation, which constitutes an indirect prompt injection surface.
- Ingestion points: User requests and external documentation verified via Context7 WebSearch (as described in the
investigatephase ofSKILL.md). - Boundary markers: No explicit input delimiters are defined in the instructions, though output is managed via structured templates defined in the
<output>section. - Capability inventory: All sub-agents (
design,database,general-purpose,explore,validator) are explicitly configured asreadonly="true". RulesDC-C001andDC-C002strictly prohibit file modifications and code implementation across all phases. - Sanitization: No explicit sanitization or filtering logic is implemented within the provided skill instructions.
- [EXTERNAL_DOWNLOADS]: The workflow incorporates the
Context7tool andWebSearchcapability to verify documentation and standard references. This involves network access to retrieve external data for fact-checking purposes during theinvestigatephase.
Audit Metadata