chief-of-staff
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external environments, which creates a potential surface for indirect prompt injection if external data contains malicious instructions.
- Ingestion points: The
SKILL.mdfile instructs the agent to access and analyze logs, test environment databases, and browser content. - Boundary markers: The instructions do not define specific delimiters or guardrails for processing this external data.
- Capability inventory: The agent is empowered to coordinate subagents and modify the development environment (e.g., adding lint rules or coding standards).
- Sanitization: There are no explicit instructions for sanitizing or validating the data retrieved from external sources.
- [SAFE]: No malicious patterns, hardcoded credentials, unauthorized network operations, or obfuscated code were detected in the analyzed files.
Audit Metadata