surface-ideas
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external resource files without providing boundary markers or sanitization, creating a surface for indirect prompt injection.\n- Ingestion points: Reads from a user-provided path to a captured Resource file (SKILL.md, Step 1).\n- Boundary markers: Absent; there are no instructions to the agent to treat the content as data only or to ignore embedded instructions.\n- Capability inventory: The agent is instructed to read files and append new rows to local CSV files (SKILL.md, Step 4).\n- Sanitization: Absent; the skill does not perform escaping or filtering on the content extracted from the resource files.
Audit Metadata