synthesize
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and synthesize findings from research agents and multiple external channels, creating a surface for indirect prompt injection.
- Ingestion points: Research results returned from multiple external channels (SKILL.md).
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the processing workflow.
- Capability inventory: The workflow utilizes internal synthesis tools (tome.synthesis.merger.merge_findings, tome.synthesis.ranker.rank_findings, tome.synthesis.ranker.group_by_channel, tome.output.report.format_report). No high-privilege capabilities such as arbitrary shell execution or network exfiltration are invoked.
- Sanitization: No explicit sanitization or validation of the input research data is described in the workflow.
Audit Metadata