research
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external primary sources, creating a surface for indirect prompt injection.\n
- Ingestion points: Content is retrieved from official documentation, source code, and third-party APIs as described in
SKILL.md.\n - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the researched materials.\n
- Capability inventory: The skill utilizes file system write capabilities to save research findings to the repository.\n
- Sanitization: No explicit sanitization or validation of the fetched content is specified before writing to the filesystem.
Audit Metadata