research
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources including documentation and APIs, creating a potential for indirect prompt injection attacks where malicious external content could influence the agent's behavior.
- Ingestion points: The skill is instructed to investigate questions against official documentation, source code, specifications, and first-party APIs as defined in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to help the agent distinguish between its core instructions and data retrieved from external sources.
- Capability inventory: The skill has the capability to write research findings to new or existing Markdown files and repository indices as described in Step 3 of SKILL.md.
- Sanitization: No sanitization, filtering, or validation of the externally sourced content is performed before it is written to the repository.
Audit Metadata