analyze-agent-overlap
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze instructions, prompts, and agent definitions from various provider folders (e.g.,
.github/,.claude/). This creates a vulnerability where malicious instructions hidden in the analyzed files could potentially influence the agent's behavior or bias the generated 'Overlap Analysis' report. - Ingestion points: The skill instructions specify scanning
<provider>/agents/*.md,<provider>/skills/*/SKILL.md,<provider>/prompts/*.prompt.md, and<provider>/instructions/*.instructions.md. - Boundary markers: The skill does not explicitly define boundary markers or instruct the agent to ignore embedded instructions within the data being analyzed.
- Capability inventory: The skill itself does not include scripts or active capabilities like network access or file writing; its output is restricted to a structured markdown report.
- Sanitization: No sanitization or validation logic for the ingested content is specified in the instructions.
Audit Metadata