hillclimb
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from targets and historical records, which could contain malicious instructions.
- Ingestion points: The skill ingests data from the
<target>argument, artifact contents, and historical execution logs retrieved during the lookup process (SKILL.md). - Boundary markers: There are no defined boundary markers or "ignore" instructions to prevent the agent from obeying commands embedded within the artifacts being optimized (SKILL.md).
- Capability inventory: The skill invokes the
figure-out,define, anddotools, which collectively provide the capability to plan and execute tasks, potentially including file system operations or code execution (SKILL.md). - Sanitization: No sanitization or validation routines are specified for the target content or the goals before they are passed to the downstream tools, increasing the risk that a malicious artifact could hijack the agent's flow.
Audit Metadata