stop-overthinking
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes user-provided context without sanitization or boundary markers.
- Ingestion points: Untrusted data enters the agent context via user input when the skill is explicitly invoked (SKILL.md).
- Boundary markers: Absent; the instructions do not provide delimiters or instructions to ignore potential commands embedded within user data.
- Capability inventory: None; there are no subprocess calls, file-write operations, or network requests defined in the skill files.
- Sanitization: Absent; the skill does not define any validation or escaping mechanisms for external content.
Audit Metadata