investigate
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by processing arbitrary content from codebase files.
- Ingestion points: Files retrieved from the codebase via search and read tools (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or guardrails to prevent the agent from executing instructions embedded within the codebase files.
- Capability inventory: The skill uses tools to search and read the local filesystem.
- Sanitization: There is no mention of validation or sanitization of the content retrieved from the files before processing.
Audit Metadata