shape-up
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from existing project documents during its "Update" and "Find" modes.
- Ingestion points: Reads existing pitch or cycle documents from paths including
product/,planning/,cycles/, andpitches/(SKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore embedded commands within the files it reads.
- Capability inventory: The skill is capable of performing file system searches, reading file contents, writing updated markdown documents, and invoking other integrated skills (SKILL.md).
- Sanitization: No explicit sanitization or validation logic is described for the content retrieved from processed files.
Audit Metadata