alterlab-rma-survey-builder
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external sources, which could potentially contain malicious instructions.
- Ingestion points: The workflow instructs the agent to "Search the web for validated survey instruments" and "Read existing project files" (SKILL.md, Workflow section).
- Boundary markers: There are no explicit instructions to delimit or ignore instructions embedded within the external data sources.
- Capability inventory: The agent is instructed to perform web searches and write multiple markdown files to the project directory.
- Sanitization: No sanitization or validation of the retrieved external content is specified.
Audit Metadata