status
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from
timeline.mdand theexperience/andresume/directories to generate a summary report. This ingestion of potentially untrusted data represents an indirect prompt injection surface where embedded instructions could influence the agent's behavior. - Ingestion points: Local repository files including
timeline.md, files inexperience/, and files inresume/. - Boundary markers: Absent; there are no instructions to delimit or ignore embedded instructions within the source files.
- Capability inventory: File read operations and text generation for summary reporting.
- Sanitization: Absent; the skill does not specify any validation or filtering of the file contents.
- [NO_CODE]: The skill consists entirely of markdown instructions for the agent and does not include any scripts, binaries, or other executable code.
Audit Metadata