audit
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Potential for Indirect Prompt Injection. The skill is designed to ingest and analyze data from untrusted sources (external websites or local codebases), which could contain instructions meant to influence the agent's behavior.
- Ingestion points: The skill accepts a
<url|path>argument and uses theWebFetchandReadtools to ingest external content (SKILL.md). - Boundary markers: The instructions do not define boundary markers or include directives to ignore instructions embedded within the processed data.
- Capability inventory: The skill has access to powerful tools including
Bash,Task, andWebFetch(SKILL.md). - Sanitization: There is no mention of sanitization or validation logic for the content fetched from external sources before it is processed by the agent.
Audit Metadata