pre-mortem
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from project plans and existing documents, establishing a surface for indirect prompt injection.
- Ingestion points: The skill ingests user-provided project descriptions and reads existing markdown files from the 'product/', 'planning/', 'risk/', and 'decisions/' directories.
- Boundary markers: There are no specific delimiters or safety instructions provided to the agent to distinguish between its own instructions and content found within external files.
- Capability inventory: The agent's capabilities in this context include searching the file system and reading or writing markdown files; it does not have access to network tools or arbitrary code execution.
- Sanitization: The skill does not perform any validation or sanitization of the content ingested from the external files or user input.
Audit Metadata