kata-jido-ai
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to read and analyze local project data, including source code, documentation, and configuration. This creates a data ingestion surface that could be exploited if the analyzed files contain malicious instructions. * Ingestion points: Local source files and documentation as specified in SKILL.md. * Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed project files. * Capability inventory: The skill facilitates the creation and use of tools with potential filesystem, shell, and network access. * Sanitization: The skill recommends input validation at action boundaries but does not address sanitization of the primary data ingestion stream.
Audit Metadata