requirements-clarity
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a processing engine for untrusted user requirements, which are subsequently used to generate dialogue and filesystem modifications.\n
- Ingestion points: Input requirement descriptions provided by users (SKILL.md, Step 1).\n
- Boundary markers: The agent instructions lack delimiters or instructions to ignore potential commands embedded within user input.\n
- Capability inventory: The skill utilizes the
Writetool to generate and save Markdown files in the./docs/prds/directory.\n - Sanitization: No explicit input validation or sanitization routines are defined to handle malicious content in user requirements.
Audit Metadata