figure-style
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing and reviewing external data, claims, and research artifacts to generate plots, which constitutes an ingestion surface for untrusted data.
- Ingestion points: Research data and artifacts used for plotting and labeling (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within the processed data.
- Capability inventory: The skill guides the agent to render plots and save code/data, implying the use of code execution or file-writing tools (SKILL.md).
- Sanitization: The instructions do not specify any validation or sanitization steps for the input data.
Audit Metadata