hack
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a methodology for the agent to ingest and analyze data from external, untrusted sources such as target web applications and APIs.
- Ingestion points: The "Operating Model" section in SKILL.md instructs the agent to collect data from input locations (URL, query parameters, JSON, headers, cookies, filenames) and output locations (HTML, JS, PDF, logs, mobile endpoints).
- Boundary markers: The instructions lack explicit boundary markers or delimiters to prevent the agent from executing instructions potentially embedded within the target data being analyzed.
- Capability inventory: This skill file is primarily informational markdown and does not contain executable code, though it acts as a router for other specialized security skills.
- Sanitization: There is no evidence of sanitization, validation, or filtering of the external content before it is processed by the agent's logic.
Audit Metadata