hiring
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting and processing content from external sources which could contain malicious instructions.
- Ingestion points: Reads
BUSINESS_CONTEXT.mdfrom the project root and processes candidate background summaries provided by the user inSKILL.md. - Boundary markers: The instructions lack explicit boundary markers or warnings to the model to ignore embedded instructions within these external data sources.
- Capability inventory: The skill performs local file read/write operations to manage hiring plans and business context.
- Sanitization: No sanitization, escaping, or validation of the ingested external content is defined.
Audit Metadata