trap-detector
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and does not contain any executable code, scripts, or commands.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the user message and conversation history, creating a theoretical surface for indirect prompt injection.\n
- Ingestion points: The skill ingests 'current user message' and 'recent thread history' as described in 'SKILL.md'.\n
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the guidelines.\n
- Capability inventory: No capabilities for network access, file system modification, or command execution were found in the skill body or metadata.\n
- Sanitization: No specific sanitization or filtering of input data is mentioned.\n
- Assessment: Since the skill lacks the ability to perform any external actions (no sinks), the risk associated with this ingestion surface is effectively safe.
Audit Metadata