pc-acceptance-criteria
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation. It contains no executable scripts, binaries, or automated shell commands, eliminating the risk of direct malicious execution.
- [INDIRECT_PROMPT_INJECTION]: The skill specifies inputs for processing requirements and specifications documents which may originate from untrusted sources; however, the lack of executable capabilities makes this a non-exploitable surface.
- Ingestion points: The skill identifies 'requirements-doc' and 'spec-doc' as inputs in the SKILL.md frontmatter and references/io-contract.md.
- Boundary markers: No specific delimiters or safety instructions are defined for processing these inputs.
- Capability inventory: None. The skill does not utilize any tools, scripts, or network operations.
- Sanitization: No sanitization or validation logic is present as the skill is purely informational.
Audit Metadata