source-driven
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation retrieved via WebFetch, which creates a potential surface for indirect prompt injection if the source documentation contains malicious instructions.
- Ingestion points: Documentation pages fetched via WebFetch based on project dependencies (SKILL.md).
- Boundary markers: No delimiters or instructions to ignore embedded prompts are defined for the fetched content.
- Capability inventory: The agent uses retrieved information to write code; no high-risk system capabilities are explicitly invoked.
- Sanitization: No explicit content validation or sanitization is described for the retrieved documentation.
Audit Metadata