research
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to investigate and process information from primary sources such as official documentation, source code, and API specifications. This behavior creates a vulnerability surface where instructions embedded in these external, untrusted sources could influence the agent's behavior during the research process.
- Ingestion points: Primary sources (official docs, source code, specs, first-party APIs) as specified in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from obeying instructions found within the researched content.
- Capability inventory: The agent is authorized to write research findings to the local filesystem (e.g., in
.specs/research/). - Sanitization: There are no instructions provided for sanitizing or escaping the content retrieved from external sources before it is written to the repository.
Audit Metadata