loom-learning
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes task evidence to create permanent lessons and heuristics via tools like
loom_learn_recordandloom_heuristic_propose. If this evidence is manipulated, it could inject persistent malicious instructions.\n- Ingestion points: Evidence and diagnostic findings recorded via the tools specified inSKILL.md.\n- Boundary markers: The skill does not employ explicit delimiters or boundary instructions to prevent the agent from obeying instructions embedded in the stored data.\n- Capability inventory: The skill relies onloom_learn_record,SynaBun_remember,loom_heuristic_propose, andloom_heuristic_reviewto retrieve and store information.\n- Sanitization: No specific data sanitization or filtering is defined for the ingestion process, relying instead on high-level reviewer confidence levels.
Audit Metadata