research
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface inherent to its function of researching external primary sources.
- Ingestion points: The agent is instructed to read official documentation, source code, and first-party APIs as specified in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill has the capability to write research findings to the local filesystem at the path {agentRoot}/research/ (SKILL.md).
- Sanitization: No explicit validation or sanitization of the research data is implemented in the skill instructions.
Audit Metadata