investigate
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill researches a codebase by searching and reading its files, creating an attack surface where instructions embedded in the code could influence agent behavior.
- Ingestion points: Codebase files accessed during the 'Search' and 'Read' steps described in SKILL.md.
- Boundary markers: The instructions do not define delimiters or provide specific warnings to the agent to ignore or isolate instructions found within codebase content.
- Capability inventory: The skill provides the agent with search and read capabilities to investigate files and gather context.
- Sanitization: The skill does not perform sanitization or validation of the codebase data before it is ingested into the agent's context.
Audit Metadata