wrap-up
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze conversation history and artifacts to determine cleanup actions, creating a path for untrusted data to influence behavior. \n- Ingestion points: Reconstructs the session footprint using the conversation history and known artifacts (SKILL.md). \n- Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the artifacts being processed. \n- Capability inventory: Authorizes file deletion, stopping background processes, and committing changes to repositories (SKILL.md). \n- Sanitization: No validation or sanitization of artifact content is defined before actions are taken based on that content.
Audit Metadata