entity-stream-queries
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods to read from collections such as
inbox, which ingest untrusted data from external sources. While this establishes a potential surface for indirect prompt injection, the provided examples focus purely on database query logic. 1. Ingestion points: Internal database collectionsmanifestsandinbox(referenced inreferences/collections.md). 2. Boundary markers: None mentioned in these technical reference files. 3. Capability inventory: Standard agent runtime commandsctx.sendandctx.spawn(referenced inreferences/common-queries.md). 4. Sanitization: Not applicable to the database query logic described. - [SAFE]: No malicious patterns, unauthorized command execution, or data exfiltration attempts were detected. The skill instructions are limited to technical documentation for vendor-owned state management libraries.
Audit Metadata