technical-design
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is instructed to read and process external documents to generate technical designs.
- Ingestion points: Reads requirement data from
output/doc/requirements-analysis-review.md,requirements-analysis-review.xmind, and files withinoutput/design-output/. - Boundary markers: Absent. The instructions do not provide specific delimiters or safety instructions to distinguish between the content of the requirement files and potential instructions embedded within them.
- Capability inventory: The skill is limited to reading local files and writing generated markdown files (
technical-design.md,technical-design-review.md) to the local file system. It has no network access or command execution capabilities. - Sanitization: Absent. No validation or sanitization is performed on the input documents.
Audit Metadata