grilling
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to process user-provided content (plans, decisions, ideas) and to independently gather facts from the local environment using sub-agents and tools. This behavior establishes an attack surface where malicious instructions embedded in files or user input could influence the agent's behavior.
- Ingestion points: User input for the grilling process and data retrieved from the filesystem or tools by sub-agents (SKILL.md).
- Boundary markers: The skill does not define clear delimiters or instruct the agent to disregard instructions found within the data it processes.
- Capability inventory: The agent is authorized to dispatch sub-agents to access the environment and filesystem (SKILL.md).
- Sanitization: No sanitization or validation steps are prescribed for the external facts gathered during the process.
Audit Metadata