research
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill relies on fetching and processing untrusted data from external primary sources, which presents a surface for indirect prompt injection.
- Ingestion points: Primary sources including official documentation, source code, specifications, and first-party APIs mentioned in SKILL.md.
- Boundary markers: Absent; the instructions do not define delimiters or provide warnings to the agent to disregard instructions found within the source material.
- Capability inventory: The skill allows the agent to write research findings into Markdown files within the repository as specified in SKILL.md.
- Sanitization: Absent; there are no requirements for sanitizing, escaping, or validating the content retrieved from external sources before processing.
- [NO_CODE]: This skill consists entirely of natural language instructions and configuration files; it does not include or execute any scripts or binary files.
Audit Metadata