research
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's objective is to research external primary sources, which creates a surface for indirect prompt injection. A malicious primary source could contain hidden instructions designed to influence the agent's behavior.
- Ingestion points: Official documentation, source code, specs, and first-party APIs (SKILL.md).
- Boundary markers: The instructions do not define delimiters or provide warnings to ignore embedded instructions in the ingested content.
- Capability inventory: The agent is authorized to write and save Markdown files to the local repository (SKILL.md).
- Sanitization: No sanitization, validation, or filtering of the external source content is specified in the instructions.
Audit Metadata