research
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of high-level guidance for the agent's reasoning process and does not include any scripts, commands, or executable code.
- [INDIRECT_PROMPT_INJECTION]: The instructions direct the agent to analyze external content such as primary documentation and source code during research tasks. This introduces a potential surface for indirect prompt injection if those external sources contain malicious instructions.
- Ingestion points: External documentation, source code repositories, and changelogs.
- Boundary markers: None specified in the instructions.
- Capability inventory: The skill does not define its own tools or capabilities, relying on the agent's standard environment.
- Sanitization: No explicit sanitization or validation of external content is requested.
Audit Metadata