thought-based-reasoning
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for reasoning techniques like ReAct and Reflexion that involve processing external observations or iterative feedback. This identifies a vulnerability surface where untrusted data could potentially influence agent behavior if boundaries are not strictly enforced by the model or the implementation environment.
- Ingestion points: SKILL.md contains placeholders for user questions, tool observations (in ReAct), and reflection outputs.
- Boundary markers: Templates do not include explicit delimiter-based boundary markers or instructions to ignore embedded commands in the processed data.
- Capability inventory: The guide describes actions including external search, context lookup, and code execution (via PAL).
- Sanitization: The skill does not discuss or implement sanitization or validation of the input data processed during these reasoning steps.
- [DYNAMIC_EXECUTION]: The skill documents the 'Program-Aided Language Models' (PAL) technique, which generates and executes Python code for precise computation. While the skill is purely educational and does not perform execution itself, the documented technique requires a secure, sandboxed execution environment to mitigate risks associated with executing model-generated code.
Audit Metadata