prompt-injection-defense
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill documentation in SKILL.md, EXAMPLES.md, and TRANSCRIPT.md contains text patterns such as 'IGNORE PREVIOUS INSTRUCTIONS' and 'IGNORE ABOVE'. These are identified as pedagogical examples of injection attacks that a developer might encounter, rather than active directives for the agent to override its operational instructions.
- [SAFE]: The skill provides best-practice security guidance, including instructions on implementing authorization layers, two-model isolation, and capability gating for high-impact tools.
- [NO_CODE]: The skill package is composed entirely of markdown instructions and YAML configuration. It contains no executable scripts, shell commands, or third-party package dependencies.
Audit Metadata