footprint-entity-expert
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents procedures for querying external WMS OData entities, which establishes a surface for indirect prompt injection from the retrieved data fields.
- Ingestion points: External data is fetched from entities like
ArchivedShippingLicensePlateContents,Tasks, andMaterialsas outlined inreferences/archived-shipping-lpc.mdandreferences/receiving-tasks.md. - Boundary markers: The instructions do not recommend the use of delimiters or specific warnings to ignore instructions that might be embedded within data returned from the WMS (e.g., in
Materialdescriptions orTasknotes). - Capability inventory: The skill encourages the use of
dxs odata executeand$apicalls to retrieve content which is then used for reporting and logical calculations (e.g., weight functions inreferences/weight-and-units.md). - Sanitization: There is no guidance provided for sanitizing or escaping the data retrieved from the external service before it is processed or presented to the user.
Audit Metadata