ab-test-generator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content to generate A/B test variants, creating a surface where malicious instructions embedded in the input text could attempt to override the agent's behavior.
- Ingestion points: The
originalfield in the input schema inSKILL.mdwhich ingests external text for analysis. - Boundary markers: The instructions lack explicit delimiters or specific directives for the agent to ignore instructions contained within the user-provided content.
- Capability inventory: The skill does not define any capabilities for file writes, network operations, or shell command execution, limiting the potential impact of an injection.
- Sanitization: There is no evidence of input validation or sanitization to filter out prompt injection patterns from the input content.
Audit Metadata