recheck-against-upstream
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and metadata do not contain any malicious patterns, obfuscation, or unauthorized access attempts. The logic focuses on aligning project state with external sources of truth through manual and automated auditing.
- [PROMPT_INJECTION]: The skill's primary function creates an indirect prompt injection surface as it fetches and processes untrusted external content to guide local file modifications.
- Ingestion points: The agent is instructed to fetch 'live vendor documentation' from external network sources (SKILL.md).
- Boundary markers: No explicit delimiters are defined to separate the fetched content from the agent's internal instructions.
- Capability inventory: The skill allows the agent to modify local configuration and code files to 'fix gaps toward upstream' based on external data (SKILL.md).
- Sanitization: No validation or sanitization rules are provided to ensure the fetched documentation does not contain malicious instructions.
Audit Metadata