verification-methodology
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and verify untrusted artifacts, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: The skill processes external artifacts, implementations, and source files identified during the investigation phase.
- Capability inventory: The agent is instructed to use
search_files,read_file,ls,find,hugo, andcurlduring the verification process. - Sanitization: The instructions do not specify any validation or sanitization for the content of the artifacts being processed.
- Boundary markers: While the skill uses a structured protocol, it does not mandate specific boundary markers to isolate untrusted data from the agent's instruction context.
- [COMMAND_EXECUTION]: The methodology requires the execution of shell commands to validate criteria.
- The skill instructs the agent to use
curlto verify that links within an artifact resolve correctly, which involves initiating network requests to arbitrary external URLs. - It uses the
hugocommand to verify that static site builds exit without error. - Common file system utilities such as
lsandfindare utilized to locate duplicate files or verify directory structures.
Audit Metadata