user-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external data sources, which creates a surface for indirect prompt injection where hidden instructions in that data could influence the agent's behavior.
- Ingestion points: The skill explicitly requests context from external sources like Reddit threads, reviews, and support tickets in
SKILL.md(Step 1). - Capability inventory: The skill utilizes the
Writetool to automatically save output to the filesystem atdesign/02-user-modeling.md(SKILL.md, Step 5). - Boundary markers: There are no explicit instructions or delimiters defined to guide the agent to ignore or isolate embedded instructions within the ingested research data.
- Sanitization: The skill does not define any sanitization or validation steps for the external data before it is processed and written to a file.
Audit Metadata