product-init
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local setup scripts (
setup-product-init.shandsetup-product-init.ps1) to resolve repository paths, detect feature areas, and calculate the next available document ID. - [INDIRECT_PROMPT_INJECTION]: The analysis pipeline ingests data from untrusted external sources, specifically the user's codebase, documentation (READMEs, ROADMAPs), and pricing configuration.
- Ingestion points: Codebase directory structure,
README.md,ROADMAP.md,pricing.md, and service definitions indocker-compose.ymlvia the bash and PowerShell setup scripts. - Boundary markers: The instructions do not define explicit delimiters or instructions to separate raw data from agent instructions during the Discovery, Pattern, or Synthesis phases.
- Capability inventory: The skill facilitates reading files across the repository and writing generated Markdown files and a state JSON file to the
.adlc/directory. - Sanitization: The setup scripts employ standard JSON conversion utilities (
ConvertTo-Jsonin PowerShell andjson.dumpsin a Python subprocess) to safely format metadata and detected areas.
Audit Metadata