fact-checker
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Markdown files to extract and verify claims. A maliciously crafted document could contain instructions intended to override the agent's logic or bias its fact-checking results.
- Ingestion points: The
scripts/fact_checker.pyscript reads the entire content of the input Markdown file for processing. - Boundary markers: The prompts in
scripts/fact_checker.py(such asSPLIT_PROMPTandVERIFY_PROMPT) interpolate document content directly into the instructions without using distinct delimiters or explicit warnings for the AI to ignore instructions embedded within the text. - Capability inventory: The script has the ability to read local files, write JSON results to the filesystem, and perform network requests via the Gemini API with Google Search capabilities.
- Sanitization: There is no specific sanitization or filtering of the input text performed before it is passed to the LLM for analysis.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to interact with Google's Gemini API and utilizes the integrated Google Search tool.
- Evidence: The script
scripts/fact_checker.pyuses thegoogle-genailibrary to call model generation endpoints and enables thegoogle_searchtool for verification. - Context: These network calls target well-known services from Google and are essential for the skill's stated purpose of AI-powered fact-checking.
Audit Metadata