validate
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface detected where untrusted specification file content is processed by the agent.
- Ingestion points: Content is read from the file path provided via the
$ARGUMENTSvariable in the workflow. - Boundary markers: No explicit delimiters or instructions are used to separate user-provided specification content from the agent's logic.
- Capability inventory: Access to tools like
Read,Glob,Skill, andTaskallows for file system interaction and spawning of other agents. - Sanitization: No validation or sanitization of the input file content is performed prior to the quality and compliance assessment phase.
Audit Metadata