teach
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by ingesting data from external project files.
- Ingestion points: The skill reads
TASK.md,PLAN.md,SPEC-###.md, andADR-*.mdfiles from theideas/andspaces/directories to establish context. - Boundary markers: There are no explicit instructions or delimiters defined to isolate the content of these files from the agent's core pedagogical instructions.
- Capability inventory: The skill is restricted to
Read,Glob,Grep, andWebSearchtools. It lacks the ability to write to the file system or execute shell commands. - Sanitization: No sanitization or validation routines are specified for the content retrieved from the local project files or web searches.
Audit Metadata