The Agent Skills Directory

[PROMPT_INJECTION]: The skill does not contain any instructions that attempt to override agent safety guidelines, bypass constraints, or extract system prompts. The language used is strictly instructional and related to the stated purpose of test impact analysis.
[DATA_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or network operations were detected. The skill processes user-provided input data (JSON and CSV) to generate reports, which is standard for this type of analytical task.
[REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. No use of curl, wget, or similar tools was found.
[COMMAND_EXECUTION]: The skill is entirely descriptive and does not utilize shell commands, subprocess calls, or any form of system-level execution.
[DYNAMIC_EXECUTION]: No dynamic code generation, runtime compilation, or unsafe deserialization patterns were identified.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process external data (change requests, traceability matrices). While this technically creates an ingestion surface for indirect prompt injection, the skill lacks any capabilities (such as network access or file system modification) that would allow such an injection to be exploited. Standard LLM guardrails are sufficient for this implementation.

impact-analysis