research
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external 'primary sources' (documentation, source code, and APIs) and write findings to the local repository. This creates an attack surface where instructions embedded in those external sources could influence the agent's behavior during the research process.
- Ingestion points: External primary sources accessed during research as specified in
SKILL.md. - Boundary markers: None identified; there are no instructions to the agent to treat fetched content as data only or to ignore embedded commands.
- Capability inventory: The skill has the capability to write files to the repository (
Write the findings to a single Markdown file). - Sanitization: No sanitization or validation steps are mentioned for the content retrieved from external sources.
Audit Metadata