context-map
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external input via the
task_descriptionvariable. This represents a surface where untrusted data could attempt to influence the agent's planning process. However, the skill's impact is minimal as it only guides the agent to generate a markdown context map. - Ingestion points:
{{task_description}}inSKILL.md. - Boundary markers: None present around the interpolated variable.
- Capability inventory: No executable scripts, network access, or file-writing capabilities are defined within this skill.
- Sanitization: No explicit sanitization or filtering of the task description is performed.
- [SAFE]: The skill does not include any executable code, scripts, or binary files. It functions strictly as a prompt template for organizing agent thoughts.
Audit Metadata