feature-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains an inherent indirect prompt injection surface because it reads and interprets data from user-modifiable markdown files without isolating the data from instructions.\n
- Ingestion points:
SKILL.md(Step 2 and Step 3) specifies reading and extracting functionality fromspec.mdandfeatures.md.\n - Boundary markers: Absent. The instructions do not prescribe any delimiters or guardrails to prevent the agent from executing instructions embedded within the files.\n
- Capability inventory: Safe level capability inventory. The skill only writes output files to
/mnt/user-data/outputs/features.mdand/mnt/user-data/outputs/spec.md, and callspresent_files. No network operations or command line capabilities exist withinSKILL.md.\n - Sanitization: Absent. No escaping or filtering is applied to the content parsed from the markdown files before it is processed by the model.
Audit Metadata