osw
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied content via the
$ARGUMENTSplaceholder inSKILL.md. - Ingestion points: Input is passed directly to the model through the
$ARGUMENTSvariable. - Boundary markers: None present to delimit user input from instructions.
- Capability inventory: The skill has no capabilities for network access, file system writes, or command execution.
- Sanitization: No sanitization or validation of the input is performed.
- Risk Assessment: The lack of dangerous capabilities makes the risk of this injection surface negligible.
- [NO_CODE]: The skill consists entirely of markdown instructions and YAML configuration. It contains no executable scripts (Python, JavaScript, shell) or compiled binaries.
Audit Metadata