opentide-threat-vector
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external threat intelligence data, which is an untrusted source that could contain malicious instructions.
- Ingestion points: User-provided reports, feeds, or narratives as described in the skill description and Phase A workflow.
- Boundary markers: The skill utilizes structured markdown tables for hand-offs and YAML block scalars ("|") for descriptions, which help delineate external content from instructions.
- Capability inventory: The skill generates YAML and markdown files and interacts with other analytical skills; it does not contain shell execution or network writing capabilities.
- Sanitization: Phase A mandates explicit source hygiene, the separation of facts from inferences, and source credibility assessments to filter potentially biased or malicious external data.
Audit Metadata