corpus-grounding-expander
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
WebFetchtool to download multi-version corpora from external sources. It mandates retries and literal license recording to ensure data availability and compliance. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface by pulling external content into the agent's environment. To mitigate this risk, the skill requires a 'fabrication probe' that tests if the system correctly refuses non-source content, ensuring a 'fail-closed' grounding contract where only verbatim quotes are allowed.
- [COMMAND_EXECUTION]: The
Bashtool is utilized for data normalization and running integrity probes. The instructions emphasize that these tools are used for structuring the corpus and verifying that the final system cannot emit ungrounded text.
Audit Metadata