conversion-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in its audit and application modes, creating a potential vector for indirect prompt injection attacks.
- Ingestion points: The 'AUDIT_CONVERSION' mode fetches live web pages, and the 'APPLY' mode ingests draft pages or specifications.
- Boundary markers: The instructions do not specify any delimiters or warnings to the agent to disregard potential instructions found within the analyzed content.
- Capability inventory: The agent uses its internal analysis capabilities on the fetched content; without proper scoping, the agent could be manipulated by embedded commands.
- Sanitization: No sanitization or escaping of the external content is prescribed before it is interpolated into the agent's reasoning context.
Audit Metadata