wait-what

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and follow terminology from local repository files (CONTEXT.md and CONTEXT-MAP.md).
  • Ingestion points: CONTEXT.md and CONTEXT-MAP.md are referenced as sources for ubiquitous language.
  • Boundary markers: Absent; there are no instructions to ignore embedded prompts within the context files.
  • Capability inventory: None; model invocation is disabled, and no tools for network, file writing, or command execution are requested.
  • Sanitization: Absent; the skill does not validate or sanitize the contents of the context files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:34 PM