good-strategy-bad-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed strictly of markdown documentation and prompt templates. It does not contain any executable scripts, binary files, or configuration files that could trigger command execution.- [INDIRECT_PROMPT_INJECTION]: The skill includes a template that ingests untrusted user input through the $ARGUMENTS variable.
- Ingestion points: User input is interpolated into the prompt template in SKILL.md within a block.
- Boundary markers: The template uses XML-style tags to separate user input from instructions.
- Capability inventory: The skill possesses no capabilities for file system access, network communication, or subprocess execution.
- Sanitization: The skill does not implement explicit sanitization of the input, relying instead on the structural delimiters provided in the prompt template.
- Note: Because the skill lacks any operational capabilities that could be misused, the ingestion of untrusted data does not pose a security risk.
Audit Metadata