research
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external 'primary sources' such as documentation and source code, creating a surface for indirect prompt injection if these sources contain hidden instructions.
- Ingestion points: External primary sources (official docs, source code, specs, first-party APIs) as defined in
SKILL.md. - Boundary markers: The instructions do not specify any delimiters or boundary markers to isolate external content from the agent's core instructions.
- Capability inventory: The agent is instructed to write research findings to a Markdown file within the local repository (
SKILL.md). - Sanitization: There is no mention of sanitization, filtering, or escaping of the content retrieved from primary sources before it is processed or written to the repository.
Audit Metadata