research
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external primary sources, creating a surface for indirect prompt injection where malicious instructions could be embedded in researched content.
- Ingestion points: The agent reads primary sources such as official documentation and source code (SKILL.md).
- Boundary markers: The instructions do not specify delimiters or warnings to ignore instructions embedded in the retrieved source material.
- Capability inventory: The skill allows writing markdown files to the repository and spawning background agents (SKILL.md).
- Sanitization: No content validation or sanitization steps are defined in the skill instructions.
Audit Metadata