ship-learn-next
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from external sources without sufficient safeguards. Evidence Chain:
- Ingestion points: The skill uses the Read tool to access user-provided files (defined in SKILL.md, Step 1).
- Boundary markers: The instructions do not define delimiters or 'ignore instructions' warnings for the content being read.
- Capability inventory: The skill is authorized to use Read and Write tools (SKILL.md frontmatter); it has no network or shell execution capabilities.
- Sanitization: The skill does not perform sanitization or validation of external content before interpolation into prompts.
Audit Metadata