design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied tasks via the
$ARGUMENTSplaceholder. While the content is purely informational, the lack of boundary markers around these inputs presents a standard vulnerability surface when used with the skill's extensive toolset. - Ingestion points: User-provided tasks or questions are interpolated at the
$ARGUMENTSplaceholder inSKILL.md. - Boundary markers: Absent; there are no instructions or delimiters to isolate user input from the agent's core instructions.
- Capability inventory: The skill has access to
Bash,Write,Edit,Read,Grep, andGlobtools, enabling significant file system and shell interaction. - Sanitization: Absent; the skill does not specify any validation or filtering logic for the input arguments.
- [EXTERNAL_DOWNLOADS]: The skill references several external resources relevant to the Even Hub G2 ecosystem, including an NPM package (
even-toolkit) and GitHub repositories (even-g2-notes,even-toolkit). These resources are documented as community tools and official guidelines from the vendor's ecosystem and appear legitimate.
Audit Metadata