inno-deep-research
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the project workspace which may contain untrusted instructions.
- Ingestion points: The skill utilizes
read_fileandsearch_projectto gather research material from the local environment (SKILL.md). - Boundary markers: The instructions do not define explicit delimiters or instructions to ignore potential commands embedded within the documents being analyzed.
- Capability inventory: The skill is granted the
write_filetool, allowing it to record synthesized findings back to the workspace (SKILL.md). - Sanitization: No sanitization or validation logic is specified for the data gathered before it is processed by the agent.
Audit Metadata