batch-grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external information from various sources which presents a potential attack surface for indirect prompt injection.
- Ingestion points: Reads content from the local codebase, library/API documentation (via
context7), GitHub repositories (viagh), package sources (viaopensrc), and general web search results. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for the data fetched from these external sources.
- Capability inventory: The agent can read local files, perform network operations (GitHub, web search), and invoke other skills (
/research,/domain-modeling,/pre-mortem). - Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from external tools before it is processed by the model.
Audit Metadata