environmental-analysis
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests data from external websites, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: External website content retrieved via the
WebFetchtool (SKILL.md). - Boundary markers: Absent; there are no specific instructions or delimiters used to ensure the agent ignores directives potentially embedded in the fetched data.
- Capability inventory: The skill has access to
Bash,Write, andEdittools, which could be misused if an injection were to succeed. - Sanitization: No explicit validation or filtering of the fetched web content is performed before processing.
- [SAFE]: The skill's primary function is research-oriented and relies on reputable, authoritative sources such as NOAA, FEMA, and USGS.
- [SAFE]: No hardcoded credentials, sensitive file access patterns, or malicious persistence mechanisms were detected.
Audit Metadata