research
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves fetching and processing data from external sources, which creates a potential vulnerability to indirect prompt injection where malicious instructions could be embedded in research materials.
- Ingestion points: External documentation, source code, and APIs accessed via network operations as instructed in
SKILL.md. - Boundary markers: There are no specific boundary markers or 'ignore' instructions defined for the fetched content.
- Capability inventory: The agent performs local file-write operations to save research findings in Markdown format.
- Sanitization: The skill does not describe specific sanitization or filtering procedures for the content retrieved from external primary sources.
Audit Metadata