character-candid-prompts
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied character names, clothing, and action descriptions and interpolates them into complex prompts without sanitization or boundary markers.
- Ingestion points: User input is accepted for all character and scene attributes defined in the 'Input and Default Values' section of
SKILL.md. - Boundary markers: The skill does not use explicit delimiters or instructions to prevent the agent from following instructions that might be embedded within the user-provided text strings.
- Capability inventory: The skill is limited to text generation and does not possess capabilities for file system access, network communication, or system command execution.
- Sanitization: There is no evidence of input validation, filtering, or escaping for the user-provided data before it is included in the output prompts.
Audit Metadata