socratic-inquiry
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process external materials including documents, links, and chat records.
- Ingestion points: User-provided inputs and external materials referenced in SKILL.md.
- Boundary markers: The instructions lack explicit delimitation or 'ignore instructions' wrappers for processed data.
- Capability inventory: The skill appears restricted to text-based interaction with no evidence of file system writes, network exfiltration, or command execution.
- Sanitization: No specific sanitization or filtering logic is implemented for the external content.
Audit Metadata