fact-checker
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code, prompt injections, or unauthorized network operations were identified. The skill follows best practices, providing clear documentation and unit tests for its processing logic.- [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection because it ingests untrusted external content (claims and source passages). However, the capability to exploit this is negligible as the script only generates Markdown text.
- Ingestion points: Factual assertions and source passages are loaded from
claim.jsonandsources.jsoninscripts/verify.py. - Boundary markers: Claim text and extracted passages are enclosed in double quotes within the resulting Markdown report.
- Capability inventory: The script can write the generated report to a local file path using the
--outputargument. - Sanitization: The script performs basic sanitization by replacing newline characters with spaces in source passages.
Audit Metadata