requirements-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is text processing and document generation using the
ReadandWritetools for local file management. No suspicious behaviors such as obfuscation, unauthorized network operations, or hardcoded credentials were detected. - [PROMPT_INJECTION]: The skill processes untrusted user input from documents and prototypes, creating a surface for indirect prompt injection. Malicious instructions in these documents could potentially be extracted into the requirements documentation, affecting downstream workflow stages. This risk is inherent to the skill's intended purpose.
- Ingestion points: User prototypes, PRD documents, and requirement drafts (SKILL.md).
- Boundary markers: None specified to delimit user content from instructions.
- Capability inventory: Restricted to
ReadandWritetools for file operations. - Sanitization: None.
Audit Metadata