prompt-engineering-patterns
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely instructional and promotes security best practices for handling untrusted data. It contains no executable code or malicious instructions.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly advises users to redact credentials, tokens, and personal data from artifacts before processing, which is a proactive security measure.
- [INDIRECT_PROMPT_INJECTION]: The content specifically addresses this threat by teaching users how to build safe extraction prompts that treat untrusted input as data rather than instructions. It provides guidance on using boundary markers and host-side validation to maintain safety.
- [NO_CODE]: Analysis confirms the skill consists solely of markdown guidelines and does not include any scripts, binaries, or automated tasks.
Audit Metadata