weekly-review
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files, which could contain instructions intended to manipulate the agent's behavior.
- Ingestion points: BUSINESS_CONTEXT.md and historical weekly-review-*.md files.
- Boundary markers: The skill does not employ delimiters or instructions to ignore embedded prompts when reading these files.
- Capability inventory: The skill is capable of writing and creating files in the local directory.
- Sanitization: No content validation or sanitization is performed on ingested files.
- [DATA_EXFILTRATION]: The skill reads business-sensitive files.
- Evidence: Accesses quarterly priorities, metrics, and challenges in BUSINESS_CONTEXT.md, as well as energy levels and performance data in previous reviews.
Audit Metadata