research
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions create a surface for indirect prompt injection by directing the agent to process untrusted external content and write findings to the repository.\n
- Ingestion points: External primary sources including official documentation, source code, and first-party APIs (SKILL.md).\n
- Boundary markers: None specified in the instructions to prevent the agent from following instructions embedded within the source material.\n
- Capability inventory: The agent is directed to perform file-write operations to save research findings within the repository (SKILL.md).\n
- Sanitization: No explicit sanitization or validation of the ingested content is mentioned before it is stored in the repository.
Audit Metadata