evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external artifacts, user requests, and verification evidence, which are potentially untrusted sources of data. If these sources contain malicious instructions, they could influence the agent's behavior. Evidence Chain: 1. Ingestion points: The artifact being evaluated, the original user request, and verification evidence (SKILL.md). 2. Boundary markers: Absent. The skill does not specify markers to isolate artifact content from the agent's internal evaluation instructions. 3. Capability inventory: The skill utilizes Bash, Read, and Grep, which provides a functional surface if an injection were to occur. 4. Sanitization: Absent. No specific sanitization or filtering logic is prescribed for the ingested data.
- [EXTERNAL_DOWNLOADS]: The skill references resources and grounding materials from established organizations such as NIST, OpenAI, and Anthropic.
- [EXTERNAL_DOWNLOADS]: The skill refers to the author's canonical repository for skill graph context.
Audit Metadata