research
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted data from external 'primary sources' like official documentation and source code.
- Ingestion points: The skill instructions (SKILL.md) direct the agent to investigate external primary sources, which could contain instructions intended to subvert the agent's logic.
- Boundary markers: There are no instructions providing delimiters or 'ignore' directives to separate the research content from the agent's system instructions.
- Capability inventory: The skill has the capability to write files to the repository's documentation directory (SKILL.md).
- Sanitization: There is no mention of sanitizing or validating the content retrieved from external sources before it is written to the repository.
Audit Metadata