handle-input
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a placeholder for user-supplied tasks which could potentially be used to deliver indirect instructions.
- Ingestion points: Untrusted data enters the agent context via the
$ARGUMENTSplaceholder inSKILL.md. - Boundary markers: The skill does not use specific delimiters or instructions to treat the
$ARGUMENTScontent as untrusted. - Capability inventory: Implementation involves the use of
Bash,Write, andEdittools as defined in the skill's frontmatter. - Sanitization: No explicit sanitization or validation of the input provided via
$ARGUMENTSis present in the skill instructions. - [EXTERNAL_DOWNLOADS]: The skill's code templates reference the
@evenrealities/even_hub_sdkNode.js package, which is the official development kit for the vendor's hardware and platform.
Audit Metadata