benchmark
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, such as target web pages and API endpoints, to calculate performance metrics.
- Ingestion points: Data is pulled from external URLs and API response bodies (Mode 1 and Mode 2).
- Boundary markers: No specific delimitation or isolation instructions are defined for the data processed during benchmarking.
- Capability inventory: The skill performs file system writes to store results in the
.ecc/benchmarks/directory. - Sanitization: No explicit validation or filtering of remote content is documented before processing.
Audit Metadata