fit-guide
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies extensively on
maketargets to manage the local service stack, environment setup, and data processing (e.g.,make rc-start,make process,make env-setup). These are standard development operations for the platform. - [EXTERNAL_DOWNLOADS]: The documentation describes setup processes that fetch external dependencies, including
npm installfor workspace packages andcargo installfor the Text Embeddings Inference (TEI) service. It also notes that starting the TEI service downloads a model on the first run. - [PROMPT_INJECTION]: The knowledge pipeline architecture creates a surface for indirect prompt injection. It processes HTML documents from
data/knowledge/into typed resources and indices used by the agent agents. - Ingestion points: HTML files located in
data/knowledge/(SKILL.md) - Boundary markers: The documentation does not specify the use of delimiters or 'ignore' instructions for the ingested data.
- Capability inventory: The agents can perform graph queries, vector searches, and delegate tasks to sub-agents (SKILL.md).
- Sanitization: No explicit mention of content sanitization or validation during the
transformoringeststages of the data pipeline.
Audit Metadata