skills/muratcankoylan/agent-skills-for-context-engineering/comprehensive-research-agent/Gen Agent Trust Hub
comprehensive-research-agent
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external websites via web search and URL reading tools, creating an inherent attack surface for indirect prompt injection.
- Ingestion points: The agent uses 'search' and 'read_url' tools to fetch external data as part of its research workflow as referenced in SKILL.md and patterns_found.json.
- Boundary markers: The skill instructions advocate for 'Source Traceability', 'Validation Checkpoints', and a 'Source Tracking Table' to verify retrieved information before including it in context or reports.
- Capability inventory: The agent has capabilities to read files (read_file), write files (save, write), and access the network via search and URL reading tools.
- Sanitization: The skill emphasizes quality validation and cross-referencing but lacks explicit instructions for sanitizing or escaping malicious instruction sequences within the fetched external content.
Audit Metadata