aris-formula-derivation
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading untrusted data from local files and using it to guide its file-writing operations.
- Ingestion points: The workflow explicitly reads user-specified file paths, local theory notes, formula drafts, and appendix notes (as defined in Step 1: Gather Derivation Context).
- Boundary markers: The instructions do not define explicit delimiters or security markers to isolate the ingested file content from the agent's internal logic.
- Capability inventory: The skill is configured with
Read,Write,Edit,Grep, andGlobtools, providing it with the capability to read from and modify the local filesystem. - Sanitization: There is no mechanism described for sanitizing, validating, or escaping the content retrieved from external files before it is processed by the AI.
Audit Metadata