reference-request-kit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of natural language instructions and templates for generating career-related documents. No malicious patterns, command execution, or obfuscation were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it ingests user-provided information such as names, roles, and professional stories.
- Ingestion points: User-provided inputs (circumstances, candidate referees, target roles, and stories) in SKILL.md.
- Boundary markers: None identified in the prompt templates.
- Capability inventory: None; the skill is restricted to text generation and does not have access to file writing, shell commands, or network operations.
- Sanitization: None identified; however, the lack of tool access eliminates the risk of technical exploitation via user input.
Audit Metadata