autonomous-decision
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting external data (logs, metrics, and system state) which could potentially contain malicious instructions.
- Ingestion points: The
Contextinput defined inSKILL.md, which includes raw logs and system state information. - Boundary markers: The skill does not define specific delimiters or instructions to treat the ingested context as untrusted data.
- Capability inventory: The skill is strictly instructional and does not define any tool calls, network operations, or file system access.
- Sanitization: No data validation or sanitization procedures are mentioned for the incoming context data.
Audit Metadata