wtf
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external sources which may contain malicious instructions.
- Ingestion points: The skill explicitly instructs the agent to read content from user-provided file paths or URLs in
SKILL.md("A file path or a link: read it, then explain it"). - Boundary markers: There are no instructions to use delimiters or specific prompt engineering to isolate the external content from the agent's core instructions.
- Capability inventory: The agent has the capability to read local files and fetch content from remote URLs.
- Sanitization: The instructions do not define any sanitization, validation, or filtering for the data retrieved from external files or links.
Audit Metadata