steelman
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from the repository, creating a surface for potential injection attacks.
- Ingestion points: The agent is directed to 'read cited files' and 'search symbols/patterns' within the local environment (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or directives to ignore instructions that might be embedded within the files being analyzed.
- Capability inventory: The skill utilizes file reading, symbol searching, and the execution of 'cheap checks' to verify claims (SKILL.md).
- Sanitization: There are no explicit sanitization or filtering steps mentioned for content retrieved from external files before it is processed by the agent.
Audit Metadata