alterlab-pra-csr-designer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external, untrusted sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The agent is instructed to 'search the web for current social impact data' and 'read existing project files for context'.
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its system instructions and the content of the files or web pages it processes.
- Capability inventory: The agent has the ability to perform web searches and write structured markdown files to the local project directory.
- Sanitization: The instructions do not specify any validation or sanitization of the data retrieved from the web or local files before it is processed or incorporated into outputs.
Audit Metadata