tool-call-flow
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious injection patterns or safety bypasses were detected. The instructions are focused on technical protocol details and security best practices for tool usage.
- [DATA_EXFILTRATION]: No hardcoded credentials or unauthorized data access patterns were found. Network references are limited to official documentation of trusted AI vendors.
- [OBFUSCATION]: The content was analyzed for Base64, zero-width characters, and homoglyphs; no hidden or malicious encoding was found.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies the risk of prompt injection via tool outputs as a potential vulnerability surface and provides mitigation strategies for developers.
- [DYNAMIC_EXECUTION]: The skill provides technical documentation for features like programmatic tool calling and browser-control harnesses, emphasizing security requirements such as sandboxing and approval gates.
Audit Metadata