Socratic Method
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided claims, beliefs, or context to generate structured Socratic inquiries. This pattern creates a surface for indirect prompt injection, where instructions hidden within user input could potentially influence the agent's behavior.
- Ingestion points: User input for the
/socratic,/socratic:question, and/socratic:seminarcommands defined inSKILL.md. - Boundary markers: Absent. The skill instructions do not specify the use of delimiters or 'ignore' instructions for the interpolated user content.
- Capability inventory: The skill is configured to use
Read,Write, andWebSearchtools, as listed in the YAML frontmatter ofSKILL.md. - Sanitization: No input validation or sanitization mechanisms are defined in the skill's instructions.
Audit Metadata