cn-inquiry-reply
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text from external inquiries, creating a surface where malicious instructions could attempt to override the agent's logic.
- Ingestion points: The inquiry full text specified in the Required Inputs section of SKILL.md.
- Boundary markers: Absent. The instructions do not guide the agent to use delimiters or specific ignore headers when processing the inquiry content.
- Capability inventory: The skill generates analysis reports, email drafts, and follow-up sequences. No dangerous capabilities like shell execution, network exfiltration, or file system modification were detected in the skill file.
- Sanitization: Absent. There are no instructions for the agent to sanitize, escape, or filter the external inquiry data before it is incorporated into the response logic.
Audit Metadata