research
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted primary sources such as documentation, source code, and APIs. This behavior creates a vulnerability where malicious instructions embedded in those external sources could influence the agent's behavior during the research process.
- Ingestion points: External primary sources including official documentation, source code repositories, and first-party APIs as described in
SKILL.md. - Boundary markers: The instructions lack specific delimiters or warnings to prevent the agent from following instructions that may be hidden in the researched data.
- Capability inventory: The skill utilizes network read capabilities for data gathering and file system write capabilities to save findings into the repository (
SKILL.md). - Sanitization: No sanitization or validation steps are defined to filter or escape content retrieved from external sources before it is written to the repository.
Audit Metadata