successor-profile

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands to manage files and check for environment configurations. Specifically, it uses mkdir and cp to set up documentation templates from the plugin root and ls to check for an optional overlay directory defined by the POWERSUIT_OVERLAY environment variable.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes various repository files (Markdown, YAML, JSON, and infrastructure code) to build the successor profile. Instructions that might be embedded in these files could influence the generated output.
  • Ingestion points: services/*.yml, .github/workflows/, Terraform files, Kubernetes manifests, hiring/rubrics/*.json, and docs/*.md (SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters or warnings to ignore embedded instructions in the processed data.
  • Capability inventory: The skill can read repository files, create directories, and write to docs/successor-profile.md via shell commands.
  • Sanitization: No explicit sanitization or filtering of external content is specified in the prompt instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 12:50 PM