work-the-problem
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user pastes and repository files, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: User-provided pastes and repository file contents (read via
file:line) as documented inSKILL.mdandreferences/process.md. - Boundary markers: The skill implements a "Claim hygiene" system and uses fenced blocks for its final output to delineate source data.
- Capability inventory: The skill performs repository file reads, writes local artifacts to the
.skills/directory, and invokes aresearchsub-skill. - Sanitization: Content is categorized with hygiene labels (Source/Verified/Inference/Open), but no automated sanitization of the processed strings is specified.
Audit Metadata