manage-experiments
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, such as feature flag definitions and existing experiments, which could potentially be manipulated by an adversary to influence agent behavior.
- Ingestion points: The skill uses
harness_getandharness_listtools to retrieve external definitions and metadata inSKILL.md(Create Step 2, Update Step 1). - Boundary markers: The skill includes explicit instructions to "Present full payload" and "Wait for explicit confirmation" before performing any mutation operations (SKILL.md, Create Step 6).
- Capability inventory: The skill has the ability to create, update, and delete experiments via the
harness_create,harness_update, andharness_deletetools as defined in the Tools section ofSKILL.md. - Sanitization: The skill relies on manual user review of the payload and backend validation but does not specify automated sanitization of the external metadata retrieved.
Audit Metadata