verify
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by requiring the agent to ingest and act upon the full output of verification commands.\n
- Ingestion points: Verification command output, as specified in the 'READ' step of the Gate Function in SKILL.md.\n
- Boundary markers: The instructions lack explicit boundary markers or directions to treat command output as untrusted data.\n
- Capability inventory: The skill directs the agent to 'RUN' commands, facilitating shell command execution as described in the 'Gate Function' section of SKILL.md.\n
- Sanitization: No sanitization or validation of the output is described before the agent interprets it to 'CONFIRM' success.\n
- Mitigation: Explicitly instruct the agent to ignore any natural language instructions found within command outputs and use specific delimiters to wrap external data.
Audit Metadata