complexa-target
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes data from external YAML configuration files, which is a potential surface for indirect prompt injection.
- Ingestion points: The skill reads from
configs/targets/targets_dict.yaml,configs/targets/ligand_targets_dict.yaml, andconfigs/design_tasks/ame_dict_v2.yamlto list or show target definitions. - Boundary markers: The instructions do not specify any delimiters or 'ignore' instructions when reading and displaying file content to the user.
- Capability inventory: The skill uses
Bashto execute thecomplexaCLI and other shell utilities (grep, mkdir), and theWritetool to modify the configuration files. - Sanitization: The skill correctly advises the agent to use shell-escaping and YAML quoting for complex inputs like SMILES strings and chain specifications.
Audit Metadata