technical-requirements-interview
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands (
mkdir -p) to establish the required directory structure for storing technical requirement artifacts and requirement files. These commands are localized to a user-provided base directory and are used for initialization purposes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from
business-requirements.yamlto inform the technical interview. This introduces a potential surface for indirect prompt injection, where malicious instructions within the business requirements could attempt to influence the agent's technical recommendations or the final output specification. - Ingestion points:
{base_directory}/requirements/business-requirements.yaml(read at skill start) - Boundary markers: The skill does not define explicit delimiters to isolate untrusted input from system instructions.
- Capability inventory: The agent possesses file system write capabilities (creating
.yamland.jsonlartifacts). - Sanitization: No explicit content validation or sanitization is performed on the ingested YAML data.
Audit Metadata