product-naming
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent must analyze external project context, creating a surface for indirect instructions to be processed.
- Ingestion points: The agent is instructed to "read code, read documents" (SKILL.md) to understand project background.
- Boundary markers: The instructions do not define specific delimiters or warn the agent to ignore potentially malicious hidden instructions within the project files being analyzed.
- Capability inventory: The skill primarily performs text analysis and conversational interaction. It also suggests competitor research, implying the use of search tools (SKILL.md).
- Sanitization: There are no instructions to sanitize or filter content retrieved from the external files before the agent processes it.
- [NO_CODE]: The skill consists solely of a SKILL.md instruction file and does not include any accompanying scripts, executables, or configuration files that could hide malicious logic.
Audit Metadata