specialist-engineering-lsp-index-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by interpolating raw user input into a subagent's system prompt without proper boundaries.
- Ingestion points: The
{the user's question}placeholder inSKILL.mdallows external data to enter the agent context. - Boundary markers: The skill lacks delimiters (e.g., triple quotes or XML tags) or instructions to ignore embedded commands within the user input.
- Capability inventory: The skill uses the
Agenttool to spawn subagents, which may inherit capabilities or execute instructions based on the injected content. - Sanitization: No filtering or escaping is applied to the user input before it is passed to the subagent.
Audit Metadata