morning-note
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data via
WebSearchandWebFetchtools to generate its research reports, which could potentially contain malicious instructions. - Ingestion points: External web content retrieved during news and event scanning in Step 1 (Earnings & Guidance, News & Events).
- Boundary markers: The instructions lack specific delimiters or system-level warnings to the agent to ignore any natural language instructions embedded within the fetched web content.
- Capability inventory: The skill is authorized to write files to the local directory at
$WORK_DIR/work/{task}/. - Sanitization: There is no evidence of sanitization, filtering, or validation of the external content before it is processed by the agent to create the final markdown report.
Audit Metadata