research
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external primary sources such as official documentation, source code, and first-party APIs.
- Ingestion points: The agent is instructed to read from official documentation, remote source code, and API specifications (found in
SKILL.md). - Boundary markers: The instructions do not include explicit delimiters or "ignore embedded instructions" warnings for the agent when processing this external data.
- Capability inventory: The skill allows the agent to write research findings to Markdown files within the local repository (
SKILL.md). - Sanitization: No sanitization, escaping, or validation of the retrieved external content is specified before the agent writes the data to the file system.
Audit Metadata