person-research
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill relies on the agent constructing and executing Javascript programs at runtime. The instructions guide the agent to interpolate user-provided inputs (like names and context) into predefined script templates which are then run through the
arcmira_execute_readtool. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data which could contain malicious instructions.
- Ingestion points: External data is pulled into the agent context via
arcmira.searchresults andarcmira.transcriptcontent inSKILL.md. - Boundary markers: The skill lacks explicit boundary markers or instructions to the model to ignore instructions embedded within the research data.
- Capability inventory: The skill utilizes
arcmira_execute_readfor data fetching and logic execution, and referencesarcmira_execute_writefor other operations. - Sanitization: While the script performs basic string slicing for display purposes, it does not implement sanitization or escaping to prevent potential prompt injection contained within video transcripts or search results.
Audit Metadata