dogfood
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites, creating a surface for indirect prompt injection attacks.\n
- Ingestion points: The skill ingests untrusted data from external web pages via
browser_snapshot,browser_vision, andbrowser_consoletools (SKILL.md).\n - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are used to isolate untrusted web content from the agent's core instructions.\n
- Capability inventory: The agent possesses capabilities to interact with web applications (
browser_click,browser_type,browser_press) and write reports to the local file system (SKILL.md).\n - Sanitization: The skill lacks mechanisms to sanitize or filter external content retrieved from the browser before the agent processes it.
Audit Metadata