research
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection by ingesting and processing untrusted external sources.
- Ingestion points: Processes external documentation, source code, and API specifications as primary sources (SKILL.md).
- Boundary markers: Instructions lack explicit delimiters or warnings to ignore instructions found within the external content.
- Capability inventory: The skill is authorized to write Markdown files to the local repository (SKILL.md).
- Sanitization: No sanitization or validation of the fetched content is specified before it is processed or written to the disk.
Audit Metadata