gds-domain-research
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data and user input, creating a surface for potential injection attacks. * Ingestion points: Research topics and goals provided by the user in
SKILL.md, and raw content from multiple web searches performed instep-02throughstep-06. * Boundary markers: Absent. The instructions do not define specific delimiters or instructions to ignore embedded commands in external data. * Capability inventory: The skill can execute local scripts viauv runand write to the local file system to generate reports. * Sanitization: No explicit sanitization or filtering of web search results or user input is implemented. - [COMMAND_EXECUTION]: The skill uses
uv runto execute local Python scripts likeresolve_customization.py. These scripts are part of the workflow for resolving configuration settings and executing post-completion actions. - [DYNAMIC_EXECUTION]: The agent dynamically loads configuration from multiple levels of TOML files and can load facts from the local file system using glob patterns. This flexible setup is used to tailor the research workflow to specific project needs.
Audit Metadata