define-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the consumption of external data files.
- Ingestion points: The skill reads
CUSTOMER.mdin Phase 0 and Phase 1, and potentiallyBRAND_GUIDELINES.mdin Phase 1 and Phase 4. The content of these files is used to pre-fill recommendations and guide the behavior of subagents. - Boundary markers: There are no explicit delimiters or instructions provided to the agent or subagents to ignore potential malicious instructions embedded within the
CUSTOMER.mdorBRAND_GUIDELINES.mdfiles. - Capability inventory: The skill possesses the ability to perform glob file searches, read local files, write to the filesystem (
DESIGN_GUIDELINES.md), and spawn subagents (design-researchanddesign-quality-auditor). - Sanitization: No sanitization, escaping, or validation logic is defined for the content extracted from the external files before it is interpolated into prompts for the subagents or used to generate the final design document.
Audit Metadata