llm-app-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents architectures for RAG (Retrieval-Augmented Generation) and autonomous agents that process external, potentially untrusted data.
- Ingestion points: Functions like
hybrid_searchandcompressed_retrievalinSKILL.mdretrieve external content for processing. - Boundary markers: The provided
RAG_PROMPT_TEMPLATEuses explicit instructions ('Answer... based ONLY on the following context') to constrain agent behavior. - Capability inventory: The agent patterns (
FunctionCallingAgent,ReActAgent) describe the use of external tools such assearch_webandcalculate. - Sanitization: The reference implementation uses standard Python string interpolation for prompt building without specialized sanitization or escaping of external inputs.
Audit Metadata