cw-thesis
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified in the skill instructions.
- [NO_CODE]: The skill does not contain any executable scripts, binary files, or external dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content to generate responses, which is a standard surface for indirect prompt injection. However, because the skill has no access to sensitive data, the network, or the shell, this represents no practical risk.
- Ingestion points: User-provided topic or context via the
/cw-thesiscommand (SKILL.md). - Boundary markers: None explicitly defined in the prompt instructions.
- Capability inventory: No tools, shell commands, or network operations are present in the skill.
- Sanitization: None performed on the input text.
Audit Metadata