agent-builder
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the handoff of user instructions to the
build-agenttool by requiring a faithful and verbatim transfer of user wording. This design creates a path for indirect prompt injection where adversarial instructions in the input could influence the downstream builder tools. - Ingestion points: The user's request is captured and passed as a
messageparameter to thebuild-agenttool withinSKILL.mdinstructions. - Capability inventory: The skill utilizes tools like
build-agent,build-workflow, anddata-tableswhich have the power to create and configure executable artifacts and database structures. - Boundary markers: The instructions specify that only explicit user requirements should be included in the tool call, but do not provide specific delimiters or ignore-instructions for the LLM to use when interpolating the data.
- Sanitization: There are no instructions provided for sanitizing or validating the content of the user's request before forwarding it to the builder.
Audit Metadata