cross-domain-borrow
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external data, including user-provided documents, screenshots, links, and chat records.
- Ingestion points: User-supplied background information and external materials (documents, screenshots, links, chat logs) are explicitly incorporated into the agent's context in
SKILL.md. - Boundary markers: The skill lacks explicit boundary markers or instructions for the agent to ignore potentially malicious embedded commands within the ingested materials.
- Capability inventory: No dangerous tools or capabilities (such as shell execution or network operations) are requested in the skill's configuration, limiting the impact of potential injections.
- Sanitization: There is no mention of sanitizing or validating the contents of the external materials before processing.
Audit Metadata