peridigm-evidence-fracture
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data in the form of simulation requests and answers through the
peridigm_start_contextandperidigm_answer_contextfunctions. This data is used to populate simulation specifications which are then passed to execution tools likepd-agent. Maliciously crafted input could attempt to influence the agent's interpretation of results or its tool-calling behavior. - Ingestion points:
SKILL.md(Clarify and confirm section) andreferences/capabilities.md(Workflow boundary). - Boundary markers: The skill implements a
confirm_spec_sha256hash for finalized specifications, but lacks explicit boundary delimiters for the initial raw user input. - Capability inventory: Subprocess execution via
pd-agentCLI, launching detached workers withperidigm_submit, and file system operations viaperidigm_repairandperidigm_collect. - Sanitization: The skill incorporates automated checks such as
peridigm_validateandperidigm_doctorto verify the integrity of simulation decks before they are processed.
Audit Metadata