teach-acumen
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes data from various project files to generate documentation.
- Ingestion points: The skill instructions in SKILL.md (Step 1) direct the agent to scan codebase files including README.md, package.json, and database schemas.
- Boundary markers: There are no defined delimiters or instructions to ignore embedded commands within the ingested files.
- Capability inventory: The skill has file system read access to the project directory and write access to the project root (.acumen.md) and the .acumen/ subdirectory.
- Sanitization: No sanitization or validation mechanisms are described for the content extracted from project files before it is processed by the agent.
Audit Metadata