scratchpad
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to store and interact with various forms of potentially untrusted external data within a dedicated
.scratchpad/directory. - Ingestion points: Files stored within task-specific subdirectories of
.scratchpad/, including API responses, logs, and evidence captures (SKILL.md). - Boundary markers: Absent; the instructions do not specify the use of delimiters or provide guidance to the agent to disregard instructions that might be embedded in the files it reads from the scratchpad.
- Capability inventory: The skill requires the agent to perform file system operations (creating, reading, writing, and deleting files/directories) and execute shell commands for git configuration (SKILL.md).
- Sanitization: Absent; there is no mention of sanitizing or validating the content of the data before it is written to or read from the temporary storage area.
Audit Metadata