research
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external primary sources such as documentation, source code, and APIs, and subsequently write findings to the repository. This represents a surface for indirect prompt injection where malicious instructions in the researched content could influence agent behavior.
- Ingestion points: External primary sources (documentation, source code, APIs) defined in
SKILL.md. - Boundary markers: Absent. The instructions do not provide specific delimiters or directives for the agent to ignore instructions embedded within the source materials.
- Capability inventory: The agent is instructed to write findings to a Markdown file within the repository (
SKILL.md). - Sanitization: Absent. There are no instructions regarding the sanitization, validation, or filtering of retrieved external content.
- [NO_CODE]: The skill consists entirely of natural language instructions and configuration metadata. It does not include any executable scripts, shell commands, or binary files, which reduces the direct execution risk.
Audit Metadata