readiness-quick-check
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python script (
readiness_audit.py) to perform the audit tasks. This script receives a user-supplied URL as an argument. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: External web content is retrieved from a user-provided URL using the WebFetch tool.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content embedded in the fetched data.
- Capability inventory: The skill uses Bash to run its audit logic and WebFetch to access network resources.
- Sanitization: There is no evidence of content sanitization or validation of the remote data before it is processed by the agent.
Audit Metadata