ta-methods-writer
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes data from external files without explicit safety boundaries.
- Ingestion points: The skill automatically reads contents from multiple files in the project directory, specifically
framework_*.md,coding_*.md, andcoding_GT_*.md. - Boundary markers: There are no instructions provided to the agent to treat the content of these files strictly as data or to ignore any embedded instructions within them.
- Capability inventory: The skill utilizes file-writing capabilities to save the generated draft to
methods.mdin the local directory. - Sanitization: The instructions do not specify any validation, escaping, or filtering of the content retrieved from the external files before it is interpolated into the generation process.
Audit Metadata