agentic-eval
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill describes patterns that ingest untrusted data into iterative refinement loops, which represents an indirect prompt injection surface.
- Ingestion points: The
taskparameter in Pattern 1/2 and thespecparameter in Pattern 3 (SKILL.md) ingest external requirements. - Boundary markers: No delimiters or instructions to ignore embedded commands are present in the provided templates.
- Capability inventory: The
CodeReflectorpattern references arun_testsfunction which implies the execution of agent-generated code. - Sanitization: The patterns do not include logic for sanitizing or validating generated code before execution.
- [SAFE]: The skill consists entirely of markdown documentation and Python code snippets illustrating standard AI engineering best practices. No actual executable scripts, hardcoded credentials, network exfiltration patterns, or persistence mechanisms were detected.
Audit Metadata