what-context-needed
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or dangerous behaviors were detected. The skill is limited to providing structured instructions for the AI agent to list relevant files.
- [PROMPT_INJECTION]: The skill incorporates untrusted user input via the
{{question}}variable, which creates a surface for indirect prompt injection. However, the skill does not utilize any tools or capabilities that could be exploited. - Ingestion points:
SKILL.md(via the{{question}}template variable). - Boundary markers: Absent; user input is interpolated directly into the instructions without delimiters.
- Capability inventory: None. The skill does not request or use any tools, shell commands, or network access.
- Sanitization: Absent; the input is used as-is.
Audit Metadata