reducer
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and inventory existing system implementations, including code, state, and configurations (as described in SKILL.md), which act as untrusted ingestion points. There are no explicit boundary markers or sanitization protocols mentioned to prevent the agent from interpreting embedded text (e.g., code comments) as instructions. The workflow requires the agent to have capabilities for making file modifications and executing shell-based verification tools, including tests, builds, and lints (SKILL.md Step 5), which could be manipulated if malicious instructions are present in the processed data.
Audit Metadata