persona-reaction-panel
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill is designed to ingest and analyze user-supplied draft artefacts (such as emails or scripts) and external persona files.
- Ingestion points: The skill loads a user-provided personas file from the
references/directory and reads a draft artefact provided by the user during the session as described inSKILL.mdandREADME.md. - Boundary markers: The instructions do not currently define explicit boundary markers (like XML tags or delimiters) to separate the content of the artefact from the skill's own instructions.
- Capability inventory: The skill has the capability to read local files, generate synthetic reactions, and save dated output files as outlined in the 'How a run works' and 'Output' sections of
SKILL.md. - Sanitization: There is no evidence of specific sanitization or filtering to prevent instructions embedded within a draft artefact from influencing the agent's behavior during the simulation. This creates a surface where a malicious artefact could potentially attempt to override the SHIP/REVISE/HOLD verdict logic.
Audit Metadata