kinhluan-router
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user requests and workspace evidence to determine which other skills to activate. This creates a surface where malicious instructions embedded in the processed data could attempt to influence the agent's selection or routing logic.
- Ingestion points: The skill explicitly processes the "user's current request" and "workspace evidence" as defined in the Routing Workflow section of the SKILL.md file.
- Boundary markers: The instructions do not specify the use of explicit delimiters or instructions for the agent to ignore potentially malicious embedded content within the ingested data.
- Capability inventory: The skill facilitates the selection, ranking, and ordering of other agent skills, which effectively controls the tools and capabilities available in the subsequent conversation steps.
- Sanitization: No explicit sanitization, validation, or filtering of the input content is described in the prompt to prevent the agent from obeying instructions hidden within the input data.
Audit Metadata