challenge
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from
.gauntlet/knowledge.jsonand.gauntlet/state/pending_challenge.jsonto present challenges to the developer. If these files contain malicious instructions, they could potentially influence the agent's behavior during the interaction. - Ingestion points: External files
.gauntlet/knowledge.jsonand.gauntlet/state/pending_challenge.json. - Boundary markers: The instructions do not provide explicit delimiters or warnings for the agent to ignore instructions embedded within the codebase knowledge data.
- Capability inventory: The skill performs read and write operations on local state files within the
.gauntlet/directory and manages developer progress tracking. - Sanitization: There are no described steps for validating or sanitizing the content extracted from the knowledge base before it is presented by the agent.
Audit Metadata