problem-discovery
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it is designed to ingest and process content from untrusted external platforms such as Reddit, Hacker News, and GitHub issues.
- Ingestion points: As outlined in
SKILL.md, the agent is instructed to gather evidence from public forums and community threads to validate problem hypotheses. - Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore potential commands embedded within the external data during the ingestion phase.
- Capability inventory: The agent has the capability to write files (styled HTML reports) to the workspace and to spawn subagents for parallel research lanes as defined in
references/orchestration.md. - Sanitization: The skill lacks explicit requirements to sanitize or escape "verbatim snippets" collected from the internet before they are included in the final HTML deliverable, which could potentially lead to content injection if the resulting file is rendered by a user or another agent.
Audit Metadata