brief-from-pile
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and synthesize a collection of documents ("the pile") provided by the user. This creates an attack surface where instructions hidden within these external documents could potentially influence the agent's behavior during the synthesis process.
- Ingestion points: Untrusted data enters the agent's context through "The pile," as defined in the Required Inputs section of SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or specific warnings to ignore instructions embedded within the source documents.
- Capability inventory: The skill is purely instructional and does not include subprocess execution, file writing, or network operations.
- Sanitization: There are no provisions for escaping or validating the content of the source documents before processing.
Audit Metadata