reasoning

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of documentation and a Python code example illustrating prompting techniques. No indicators of data exfiltration, malicious intent, or unauthorized access were found.
  • [PROMPT_INJECTION]: The implementation pattern provided in SKILL.md for chain_of_thought_prompt uses direct string interpolation of the question variable into the prompt template. This creates a surface for indirect prompt injection where untrusted data could influence the agent's behavior, although this is a standard pedagogical example for Chain-of-Thought reasoning.
  • Ingestion points: question argument in the Python function chain_of_thought_prompt (SKILL.md)
  • Boundary markers: Absent in the example code
  • Capability inventory: llm.generate call
  • Sanitization: None provided in the snippet
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 01:18 PM
Security Audit — agent-trust-hub — reasoning