assess-energy-shock
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external API which could potentially contain malicious instructions. Ingestion points: The
assessmentandlimitationsfields returned by thecompute-energy-shockendpoint inSKILL.md. Boundary markers: TheContent safetysection explicitly instructs the agent to treat responses as data only and disregard directive-like text. Capability inventory: The skill defines API interactions; it does not contain local scripts with subprocess or file-write capabilities. Sanitization: Relies on instructional guardrails to prevent the model from following commands found in external data.
Audit Metadata