read large webpage or knowledge
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process large-scale knowledge bases and web pages, which constitute untrusted external data sources.
- Ingestion points: The skill utilizes the
get_knowledge_by_linestool to pull content from identifiers such as URLs, document IDs, and file paths as specified in theInput SpecificationandProcessing Pipelinesections. - Boundary markers: The instructions do not define the use of delimiters or specific prompts to ensure the agent ignores or isolates instructions that might be embedded within the ingested text.
- Capability inventory: The skill is equipped with
ms-playwrightfor web access,get_knowledge_by_linesfor reading content, andadd_knowledgefor writing summarized information back into a knowledge base. - Sanitization: There is no evidence of content validation, escaping, or sanitization procedures in the
Processing Pipelineto prevent malicious data from affecting downstream processing or stored knowledge.
Audit Metadata