vrio
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references academic research papers and methodology sources from scholarly domains including journals.sagepub.com, journals.aom.org, and jaybarney.org, as well as grounding files from the author's GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves gathering evidence via web search tools, which introduces a potential surface for indirect prompt injection from untrusted external content.
- Ingestion points: External data is ingested through the WebSearch and WebFetch tools referenced in the skill metadata and workflow.
- Boundary markers: The instructions do not define specific boundary markers or 'ignore' instructions for the agent when processing retrieved web content.
- Capability inventory: The skill's toolset is limited to Read, Grep, WebSearch, and WebFetch. It does not include capabilities for arbitrary command execution, file writing, or network operations outside of standard fetching.
- Sanitization: No explicit sanitization or filtering logic is specified for the data retrieved from external sources.
Audit Metadata