events
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional markdown files and evaluation prompts. It does not contain any shell scripts, binary files, or executable code.
- [SAFE]: No hardcoded credentials, API keys, or access to sensitive file paths were detected.
- [SAFE]: The skill does not perform any network operations to external domains.
- [SAFE]: No obfuscation techniques, homoglyph attacks, or hidden content were found in any of the files.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest content from local files like
.agents/product-marketing.mdfor context. This is a low-risk surface as the skill possesses no tools or capabilities to perform privileged actions. 1. Ingestion points: Local context files referenced in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: None. 4. Sanitization: Absent.
Audit Metadata