research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill provides a mechanism for indirect prompt injection by design.\n
- Ingestion points: The agent is instructed to read external primary sources including documentation, source code, and APIs (referenced in SKILL.md).\n
- Boundary markers: Absent; the instructions do not specify any delimiters or warnings to ignore instructions found within the ingested data.\n
- Capability inventory: The agent has the capability to write research results to the local repository as Markdown files (referenced in SKILL.md).\n
- Sanitization: Absent; no filtering, escaping, or validation of the data retrieved from external sources is described before it is stored in the repository.
Audit Metadata