claude-haiku
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes tasks involving the processing of untrusted external data sources, which creates a surface for indirect prompt injection where malicious instructions could be embedded in the data being parsed or transcribed.
- Ingestion points: Webhook bodies, log lines, raw records, and structured payloads as defined in SKILL.md.
- Boundary markers: Absent; the skill does not include instructions for using delimiters or boundary markers to isolate untrusted content.
- Capability inventory: None; the analyzed file is informational and does not include scripts, subprocess calls, or network operation commands.
- Sanitization: Absent; the skill does not provide guidance on sanitizing or escaping external inputs before they are processed by the model.
Audit Metadata