customer-value-trace
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data when updating or searching for value traces within the user's directory structure, which could contain adversarial instructions.
- Ingestion points: User-provided initiative descriptions and existing documentation discovered during folder searches.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in the analyzed data.
- Capability inventory: The skill possesses no dangerous capabilities; it does not execute shell commands, perform network operations, or modify system files.
- Sanitization: There is no explicit sanitization of data before it is interpolated into the value trace output structure.
Audit Metadata