Socratic Method

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided claims, beliefs, or context to generate structured Socratic inquiries. This pattern creates a surface for indirect prompt injection, where instructions hidden within user input could potentially influence the agent's behavior.
  • Ingestion points: User input for the /socratic, /socratic:question, and /socratic:seminar commands defined in SKILL.md.
  • Boundary markers: Absent. The skill instructions do not specify the use of delimiters or 'ignore' instructions for the interpolated user content.
  • Capability inventory: The skill is configured to use Read, Write, and WebSearch tools, as listed in the YAML frontmatter of SKILL.md.
  • Sanitization: No input validation or sanitization mechanisms are defined in the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 02:59 AM