self-awareness
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes session logs, execution records, and artifacts which are influenced by session activities and could contain untrusted data.
- Ingestion points: Workflow step 1 in SKILL.md specifies workbench state, session logs, execution records, and artifact versions as data sources to be inspected.
- Boundary markers: The skill does not provide explicit delimiters or instructions to ignore embedded commands within the ingested session data.
- Capability inventory: The skill allows the agent to inspect and report counts and statuses from current files and API outputs.
- Sanitization: The instructions include a rule to exclude secrets and private paths from summaries, but do not specify methods for sanitizing or neutralizing malicious instructions in the content.
- [NO_CODE]: The skill is comprised solely of instructional markdown content in SKILL.md and does not include any accompanying scripts or executable files.
Audit Metadata