suitability-report-generator
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data, such as investment recommendations and client profiles, to generate reports. This creates a potential surface for indirect prompt injection where instructions hidden in the input could attempt to influence the agent's output. \n
- Ingestion points: Input fields defined in
SKILL.md(Investment recommendations, Client profile, Investment logic). \n - Boundary markers: The instructions do not define explicit delimiters or specific commands to ignore potentially malicious instructions within the provided input data. \n
- Capability inventory: The skill functions as a text-based report generator and does not request high-risk capabilities such as arbitrary code execution, file system writes, or outbound network access within its own instructions. \n
- Sanitization: There are no specified procedures for sanitizing or validating the content of the ingested data before it is processed.
Audit Metadata