one-initiative-summary
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external initiative data which creates a potential surface for indirect prompt injection if the fetched content contains malicious instructions.
- Ingestion points: Data is retrieved using the
list-initiativestool as described in SKILL.md. - Capability inventory: The skill calls the
initiative-summarytool to process the fetched data. - Boundary markers: The instructions lack explicit delimiters or specific directives to the agent to treat the fetched data as untrusted.
- Sanitization: No sanitization or validation steps are defined for the input data before it is processed.
Audit Metadata