iterative-retrieval
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation file (SKILL.md) that outlines a methodology for AI agents to retrieve codebase context. It uses pseudocode and examples to explain the logic for progressively refining searches.
- [INDIRECT_PROMPT_INJECTION]: The design pattern involves reading and analyzing external data (local codebase files) in a loop via the
retrieveFilesfunction. While this creates a potential surface for indirect prompt injection if a file contains malicious instructions, the skill defines a scoring and evaluation phase (evaluateRelevance) to filter content, which is a standard and necessary component of retrieval-augmented generation (RAG) tasks. - Ingestion points: The skill retrieves files from the local filesystem in the
DISPATCHphase. - Boundary markers: No explicit boundary markers or XML-style tags are provided in the prompt examples.
- Capability inventory: The pattern includes logic to read and score content using
evaluateRelevanceandidentifyGapsfunctions. - Sanitization: No specific sanitization logic is described beyond relevance scoring.
Audit Metadata