skill-trace-checker

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyses user-provided file content, which serves as an ingestion surface for indirect prompt injection. This is a functional requirement of its quality assurance role.
  • Ingestion points: SKILL.md and files in the 'references/' directory are read for analysis as specified in the evaluation workflow.
  • Boundary markers: Absent; there are no explicit delimiters defined to isolate the audited content from the skill's auditing logic.
  • Capability inventory: Capabilities are restricted to reading files and generating text reports; no network access, shell execution, or file system modification capabilities are present.
  • Sanitization: Absent; input is processed directly as text for evaluation without specific sanitization routines.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:41 AM