search-specialist
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources and codebases, creating a potential surface for indirect prompt injection attacks where malicious instructions hidden in search results could influence agent behavior.
- Ingestion points: External sources and codebase search queries (defined in SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or boundary markers to separate external data from system instructions.
- Capability inventory: The skill performs search operations within a read-only sandbox environment as specified in the metadata.
- Sanitization: The skill includes instructions for 'noise suppression' and 'relevance ranking', which act as a manual layer of filtering, though no programmatic sanitization of external content is mentioned.
Audit Metadata