requirements-verification
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text from a file path provided in $ARGUMENTS to perform requirements verification. A malicious specification file could contain embedded instructions designed to hijack the agent's behavior during the parsing and normalization phases.
- Ingestion points: The target specification file read during Phase 1 (SKILL.md).
- Boundary markers: Absent. The instructions do not define delimiters or provide warnings to the agent to disregard instructions found within the data.
- Capability inventory: The skill is limited to reading files and generating a text-based report; it lacks network access, file-writing capabilities, or shell execution tools.
- Sanitization: Absent. No validation or filtering is performed on the content of the ingested specification file.
Audit Metadata