research
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as official documentation, source code, and third-party APIs, which can contain hidden malicious instructions.
- Ingestion points: External content retrieved during research tasks as instructed in SKILL.md.
- Boundary markers: The instructions lack specific delimiters or system-level warnings to prevent the agent from accidentally executing instructions found within the researched materials.
- Capability inventory: The agent requires network access to fetch external documentation and file system access to write generated Markdown reports.
- Sanitization: There is no instruction to sanitize, escape, or validate the data retrieved from external sources before it is recorded in the repository.
- [NO_CODE]: The skill consists entirely of natural language instructions and metadata records, without accompanying scripts or executable files.
Audit Metadata