senior-prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill includes documentation and skeleton Python scripts for standard prompt engineering tasks. Analysis of the code and metadata found no evidence of malicious behavior, obfuscation, or unauthorized access to sensitive files.- [INDIRECT_PROMPT_INJECTION]: The provided scripts (scripts/prompt_optimizer.py, scripts/rag_evaluator.py, scripts/agent_orchestrator.py) include command-line arguments for input paths, establishing a data ingestion surface. As the scripts are currently skeleton templates, no logic for processing untrusted data through an LLM is implemented.
- Ingestion points: --input argument in all three Python scripts.
- Boundary markers: None present in the boilerplate implementation.
- Capability inventory: Local Python script execution and file read/write operations.
- Sanitization: None present in the skeleton code.
Audit Metadata