docs-lookup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to ingest and process data from external sources, which constitutes an indirect prompt injection attack surface.
- Ingestion points: The agent is directed to search the official Astro documentation site and integration references (SKILL.md).
- Boundary markers: There are no instructions in the workflow for using delimiters or boundary markers to isolate retrieved content from the agent's core instructions.
- Capability inventory: The workflow relies on external documentation tools and MCP integrations to retrieve data (SKILL.md).
- Sanitization: The skill lacks instructions for sanitizing, validating, or filtering the content obtained from external documentation searches before it is presented to the user.
Audit Metadata