momentic-result-classification
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection vulnerability surface because it is designed to ingest and interpret data generated by external applications during test runs.
- Ingestion points: The agent is instructed to read content from files such as
console.json(browser console output),har-pages.log(network traffic), andmetadata.json(test metadata). - Boundary markers: The instructions do not define delimiters or markers to separate untrusted data found in logs from the agent's core instructions.
- Capability inventory: The skill utilizes the
momentic_get_runandmomentic_list_runsMCP tools to fetch and process this data for analysis and bucket-based classification. - Sanitization: There is no evidence of filtering or sanitization of the test artifacts before the agent processes them, which could allow malicious content within the logs to influence the agent's classification logic.
Audit Metadata