1panel-system
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external server resources while maintaining capabilities to perform state-changing operations.\n
- Ingestion points: External data is ingested through various list tools, including
list_websites,list_ssls, andlist_installed_apps, as documented inreferences/tools.md.\n - Boundary markers: Clear instructions in
references/operation-contract.mddirect the agent to treat all tool results and imported documents strictly as data and never as instructions.\n - Capability inventory: The skill possesses write capabilities such as
create_website,create_ssl, andcreate_databaseas defined inreferences/tools.md.\n - Sanitization: The skill does not implement programmatic sanitization, instead relying on instructional prompts to prevent the execution of instructions embedded in retrieved data.
Audit Metadata