service-blueprint
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a process for ingesting external data (URLs, transcripts, and source code) which constitutes a surface for indirect prompt injection. Malicious instructions embedded in these external sources could attempt to hijack the agent's output or behavior.
- Ingestion points: The skill explicitly reads local code files (routes, controllers, models, mailers, jobs), documentation, transcripts, and external URLs (SKILL.md).
- Boundary markers: There are no explicit instructions to the agent to ignore or delimit embedded instructions within the ingested content.
- Capability inventory: The skill has the capability to read local files, fetch content from network URLs, and write files to the
docs/service-design/directory (SKILL.md). - Sanitization: No sanitization or validation of the ingested external content is specified before the agent processes it.
Audit Metadata