delegated-research
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs an agent to gather information from external primary sources and write the findings to the local repository, creating a surface for indirect prompt injection.
- Ingestion points: The agent is directed to investigate external official documentation, source code, specifications, and APIs (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters provided to ensure the agent distinguishes between research data and potential instructions embedded within that data.
- Capability inventory: The skill possesses the capability to write Markdown files directly to the repository (SKILL.md).
- Sanitization: No sanitization or validation logic is specified for the content retrieved from external sources before it is saved to the filesystem.
Audit Metadata