schema-markup
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill is designed to analyze user-provided web pages and content to generate JSON-LD schema markup. This workflow ingests untrusted data which could potentially contain malicious instructions intended to manipulate the agent's output or tool usage.
- Ingestion points: Page content, existing schema, and objectives analyzed in the 'Phase 1: Page & Goal Assessment' section of SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard embedded commands in the content being analyzed.
- Capability inventory: The skill is configured to use tools such as 'claude-code', 'codex-cli', and 'gemini-cli', which can provide file system and command execution capabilities depending on the environment.
- Sanitization: There is no evidence of input validation or filtering to prevent the processing of malicious payloads embedded in the user-provided content.
Audit Metadata