wait-what
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and follow terminology from local repository files (
CONTEXT.mdandCONTEXT-MAP.md). - Ingestion points:
CONTEXT.mdandCONTEXT-MAP.mdare referenced as sources for ubiquitous language. - Boundary markers: Absent; there are no instructions to ignore embedded prompts within the context files.
- Capability inventory: None; model invocation is disabled, and no tools for network, file writing, or command execution are requested.
- Sanitization: Absent; the skill does not validate or sanitize the contents of the context files.
Audit Metadata