false-positive-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted text content, creating an attack surface where embedded instructions could attempt to manipulate the agent's interpretation logic.
- Ingestion points: The workflow involves processing text and detector results as specified in SKILL.md.
- Boundary markers: The instructions advise distinguishing between evidence types but do not require technical delimiters to isolate analyzed data.
- Capability inventory: The skill performs editorial and interpretive analysis; it does not utilize file writing, system commands, or external network tools.
- Sanitization: No explicit logic is provided to sanitize or filter potentially malicious content within the analyzed text.
Audit Metadata