consult-glossary
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and facilitates the use of local documentation (glossaries) for naming conventions.
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to ingest content from
docs/glossary.mdand localglossary.mdfiles (Ingestion points). No explicit boundary markers or delimiters are defined to separate glossary content from instructions (Boundary markers). The skill's capabilities are limited to influencing the agent's prose and identifier naming, with no access to high-risk operations such as subprocess execution, sensitive file writing, or network requests (Capability inventory). No sanitization or validation of the glossary content is specified (Sanitization). The finding is classified as safe because the capability inventory is minimal and aligned with the skill's primary purpose.
Audit Metadata