boolean-flag-responses
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists of prompt engineering documentation and a Python implementation example. No malicious behaviors such as privilege escalation, persistence, or data exfiltration were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates to process untrusted data such as git diffs and source code. Ingestion points: Data enters the prompt through placeholder blocks like [PASTE GIT DIFF] in SKILL.md. Boundary markers: The patterns utilize XML tags like and to isolate external data. Capability inventory: The skill itself has no active capabilities; the Python example uses standard API calls. Sanitization: The protocol enforces a 'max_tokens: 1' constraint, which prevents the agent from executing instructions potentially hidden in the input data.
- [EXTERNAL_DOWNLOADS]: The provided code example references the 'openai' Python package, which is an official library from a well-known and trusted service provider.
Audit Metadata