prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill's instructions, metadata, or examples.- [REMOTE_CODE_EXECUTION]: The skill does not contain any executable scripts, shell commands, or patterns for downloading and running remote code.- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or sensitive configuration file paths (e.g., .env, .ssh) were detected.- [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests untrusted data from the user (such as 'source inputs' and 'failure examples' defined in SKILL.md and meta/skill.json). However, this is assessed as safe because the skill lacks dangerous capabilities.
- Ingestion points: SKILL.md (Gather first section), meta/skill.json (typical_inputs).
- Boundary markers: Absent for input processing.
- Capability inventory: No file-writing, network operations, or command execution capabilities were detected in the skill content.
- Sanitization: No explicit sanitization or filtering of external content is defined.
Audit Metadata