agentic-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns like ReAct, Planning, and Memory that inherently involve ingesting and processing untrusted external data (web browsing, API responses, database queries), which presents an indirect injection attack surface.
- Ingestion points: SKILL.md identifies external sources including web browsing, database querying, and Vector DB retrieval.
- Boundary markers: The skill recommends implementing strict JSON schemas for tool constraints and maintaining original user intent as a reference to detect goal hijacking.
- Capability inventory: SKILL.md describes capabilities for tool execution and API interactions within the ReAct framework.
- Sanitization: The skill explicitly advises using 'Reflective Sandboxing' to critique generated output for security risks and vulnerabilities before finalization.
- [SAFE]: The content is entirely documentation-based, providing patterns for reflection, reasoning, and memory. It does not contain any executable scripts, network requests, credential access, or obfuscated content.
Audit Metadata