prompt-engineering-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides tools for building LLM prompts from external data, which creates a potential surface for indirect prompt injection.\n
- Ingestion points: Data is processed through the
PromptTemplate.rendermethod inreferences/prompt-templates.mdand input fields inscripts/optimize-prompt.py.\n - Boundary markers: While the skill documents structural best practices (e.g., using hierarchical markers), the provided utility scripts do not programmatically enforce boundary isolation.\n
- Capability inventory: The
PromptOptimizerutility inscripts/optimize-prompt.pyallows for the automated execution of prompts against LLM endpoints.\n - Sanitization: The implementation scripts focus on functionality and do not include logic for sanitizing or escaping the interpolated content.
Audit Metadata