prompt-injection-defense
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: Static detectors flagged strings like 'ignore previous instructions' in
references/threat-techniques.md. These are technical examples used to explain injection vectors to users and are not malicious overrides of the agent's behavior. - [PROMPT_INJECTION]: The test suite in
tests/run.shprogrammatically generates hidden Unicode characters (e.g., tag-block smuggling) to validate the effectiveness of the scanner. This is legitimate behavior for a security testing tool. - [COMMAND_EXECUTION]: The skill includes Python scripts (
scan-hidden-unicode.py,sanitize-content.py) that use standard library modules for text processing. These scripts do not execute shell commands or interact with the operating system in an unsafe manner. - [EXTERNAL_DOWNLOADS]: No remote dependencies or external script fetches were identified. The tool relies entirely on local assets and Python's built-in
unicodedatamodule. - [DATA_EXFILTRATION]: No network operations or suspicious data handling patterns were found. The scripts operate as local text filters and do not attempt to transmit information externally.
Audit Metadata