dogfood

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface.
  • Ingestion points: The skill ingests untrusted data from external web pages via browser_snapshot and browser_vision in SKILL.md.
  • Boundary markers: The instructions lack explicit delimiters or guidance to treat site content exclusively as data.
  • Capability inventory: The agent possesses interactive capabilities such as browser_click, browser_type, and browser_navigate in SKILL.md.
  • Sanitization: External content is not sanitized or validated before being analyzed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 02:03 AM