refining-android-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a systematic methodology for consolidation and gap analysis of project requirements. It does not include any scripts, command execution, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies an ingestion surface for untrusted data from Jira, Confluence, and user descriptions.
- Ingestion points: Raw requirements from Jira tickets, Confluence pages, and free-text user descriptions (SKILL.md).
- Boundary markers: None defined within the skill instructions to delimit external data from agent instructions.
- Capability inventory: The skill is limited to text analysis and specification output; it possesses no capabilities for subprocess calls, network access, or file modification.
- Sanitization: No explicit sanitization of input data is defined.
- [SECURITY_BEST_PRACTICE]: The skill's 'Security Requirements' rubric actively promotes security considerations such as data sensitivity classification, encryption at rest, and auth-gating, which reflects a positive security posture for the developer workflow.
Audit Metadata