define-objective
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and YAML-formatted schemas. It does not perform any file system operations, network requests, or tool invocations.
- [NO_CODE]: There are no scripts, binaries, or automated tasks associated with this skill; it functions as a reasoning template for optimization tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for ingesting external data (e.g., stakeholder preferences) but lacks the tools or access permissions required to be exploited. 1. Ingestion points: Input contract fields 'decision_context', 'candidate_set', and 'stakeholder_preferences' in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: None (no tool usage, file access, or network calls are defined). 4. Sanitization: Absent.
Audit Metadata