to-questionnaire

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill's primary functionality involves gathering requirements from the user via chat and formatting them into a template. No evidence of malicious behavior, data exfiltration, or obfuscation was found during the analysis.
  • [COMMAND_EXECUTION]: The instructions direct the agent to write a new Markdown file (to-questionnaire-<slug>.md) to the current directory. This is a legitimate file system operation essential for the skill's purpose of document generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user input during the interview process to populate the final document. While the skill lacks explicit instructions for sanitizing or escaping the content placed into the Markdown template, the risk is minimal as the input is provided by the primary user in a controlled interactive session.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 06:49 PM