ads-next
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes
*-audit-results.jsonfiles from the current working directory to generate recommendations and interactive walk-through steps. Maliciously crafted data in these files (specifically in thefindingorrecommendationfields) could potentially influence the agent's behavior. - Ingestion points: SKILL.md Phase 1 (reads
*-audit-results.jsonfrom the current working directory). - Boundary markers: None present to distinguish untrusted data from instructions.
- Capability inventory: The skill uses
Bash,Read,Write, andAskUserQuestiontools, allowing for command execution and file system modification. - Sanitization: The skill performs structural JSON validation and schema checks but does not sanitize the natural language content within the JSON fields used for coaching.
Audit Metadata