security-threat-guide
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes untrusted data provided by the user.
- Ingestion points: The workflow in
SKILL.mdrequires the user to provide detailed descriptions of system boundaries, input sources, and trust models. - Boundary markers: There are no explicit delimiters or boundary markers used to separate user-provided descriptions from the agent's internal instructions.
- Capability inventory: The skill is highly restricted in its capabilities. It performs no network operations, subprocess executions, or sensitive file system access. The only recorded side effect is writing data to
SKILL_MEMORY.md. - Sanitization: No explicit sanitization or input validation is performed on the ingested system descriptions.
- [SAFE]: The skill's design explicitly forbids the AI from generating security patches or exploit demonstrations, reducing the risk of the agent being used to create malicious artifacts. No other indicators of credentials exposure, obfuscation, or unauthorized persistence were found.
Audit Metadata