product-roadmap
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from existing roadmap files during its 'Update' mode, which creates a surface for instructions embedded in external data to influence the agent.
- Ingestion points: The skill reads files from directories including
roadmap/,strategy/,planning/, anddocs/roadmap/(SKILL.md). - Boundary markers: No explicit delimiters or boundary markers are used to separate ingested file content from the system instructions.
- Capability inventory: The skill is capable of reading local files and writing new markdown files to the filesystem (SKILL.md).
- Sanitization: There is no evidence of sanitization, validation, or escaping of the content read from external files before it is processed by the agent.
Audit Metadata