agentic-rag
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing untrusted data from user queries and external tools, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Data enters the agent context via the
queryinput andretrieved_docslist inSKILL.md. - Boundary markers: Absent in the provided prompt templates.
- Capability inventory:
SKILL.mddescribes tools for web searching (tavily_search) and SQL database queries. - Sanitization: Not present in the provided templates.
Audit Metadata