request-handler
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for processing arbitrary user requests, which creates a vulnerability surface for indirect prompt injection attacks.
- Ingestion points: User requests are processed to classify tasks into CONSULT, BUILD, DEBUG, and OPTIMIZE modes in SKILL.md.
- Boundary markers: The instructions do not include boundary markers or specific warnings to ignore instructions embedded within the user data.
- Capability inventory: The workflow facilitates file creation (BUILD mode), code logic implementation, and system debugging, which are powerful actions if triggered by malicious input.
- Sanitization: There is no mention of sanitizing, validating, or escaping user input before it is used to drive the agent's logic or code output.
Audit Metadata