design-doc
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection attack surface because it is designed to ingest and act upon data from external, potentially untrusted sources.
- Ingestion points: The agent reads from Linear tickets, knowledge notes, and external documentation files to gather design context, as specified in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions within the skill to help the agent distinguish between its core instructions and potentially malicious instructions embedded in the external data.
- Capability inventory: The skill grants the agent the ability to write to the local filesystem (in the 'docs/' directory) and update statuses on the Linear platform.
- Sanitization: No validation or sanitization routines are defined for the content ingested from the identified external sources.
Audit Metadata