special-panels-timor-leste-jeanne-sulzer-2
Warn
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill contains conflicting metadata instructions. The README.md describes a verification methodology for the Court of Bosnia and Herzegovina (War Crimes Section), while the SKILL.md, CHANGELOG.md, and all files in the references directory focus on the Special Panels for Serious Crimes (SPSC) in Timor-Leste. This metadata poisoning could lead to the agent adopting an incorrect jurisdictional context or failing to correctly implement the intended research methodology.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to utilize web retrieval tools to ingest data from several external domains (e.g., jsmp.tl, berkeley.edu, un.org, legal-tools.org, etan.org) without providing specific boundary markers or instructions to ignore potential embedded prompts in the retrieved content. This creates a surface for indirect prompt injection.
- Ingestion points: SKILL.md and authoritative-sources.md specify external repositories for case-specific document retrieval.
- Boundary markers: Absent; there are no instructions to encapsulate external content or treat it as untrusted data.
- Capability inventory: The skill utilizes tool-based retrieval (web_fetch) to support citation and research drafting tasks.
- Sanitization: Absent; no validation or filtering is specified for the content fetched from remote servers.
Audit Metadata