signal-mine
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (news, social threads, competitor moves), creating a vulnerability surface where malicious instructions could be embedded.
- Ingestion points: Raw input data identified as "The dump" or "pasted material" is processed as the primary input in
SKILL.md. - Boundary markers: Missing. There are no instructions to use delimiters or guardrail prompts to isolate the external content from the agent's core instructions.
- Capability inventory: The skill does not possess capability for command execution, subprocess calls, network access, or file modification; its output is strictly textual within the assistant context.
- Sanitization: No input sanitization or verification steps are present in the logic to handle potentially adversarial content within the input material.
Audit Metadata