workflow
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The workflow relies on ingesting and modifying local project files, which serves as a potential entry point for instructions embedded in external data.- Ingestion points:
task.md,changelog.md,files.md, andprds/*.md.- Boundary markers: Not present; the skill assumes the agent processes the files as structured data based on the provided templates.- Capability inventory: Includes reading project history and writing updates to documentation and task tracking files.- Sanitization: No specific sanitization or filtering of input data is defined in the instructions.- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill contains explicit rules against autonomous deployment and code pushing, requiring user intervention for sensitive operations.
Audit Metadata