survey-design-basics
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided content, such as draft survey questions and interview themes, which serves as an entry point for untrusted data.
- Ingestion points: User-provided "draft questions" and "interview themes" defined in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the processed survey text.
- Capability inventory: The skill does not possess capabilities for command execution, file system modification, or network requests, which significantly limits the potential impact of an injection.
- Sanitization: There are no explicit sanitization or filtering steps mentioned for the ingested content.
- [NO_CODE]: The skill consists entirely of markdown instructions and documentation. It does not include any scripts, executable code, or package dependencies, which reduces its overall attack surface.
Audit Metadata