ctxora-navigation
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon data from external repository files, creating a vulnerability surface where instructions embedded in those files could influence agent behavior.
- Ingestion points: The agent is instructed to read
docs/COMMAND-SKILL-MAP.mdand "inspect cited files" within the repository. - Boundary markers: No explicit delimiters or boundary markers (e.g., XML tags or "ignore embedded instructions" warnings) are defined for the data being read.
- Capability inventory: The skill possesses the capability to call other tools and skills (
route_skills,prepare_context,skill_feedback) and facilitates implementation work including file editing and repository discovery. - Sanitization: There is no evidence of content sanitization or validation logic for the data retrieved from the repository files before it is processed by the agent.
Audit Metadata