genkit-extensibility-python
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to use external tools to fetch its 'Source of truth', creating a potential vector for indirect prompt injection.
- Ingestion points: The skill requires calling
search_genkit_docsandread_genkit_docsto retrieve implementation details (SKILL.md). - Boundary markers: There are no explicit instructions to use delimiters or to disregard instructions found within the retrieved documentation.
- Capability inventory: The skill's purpose includes building MCP servers, which implies the use of file-writing and execution capabilities in the agent's environment.
- Sanitization: The instructions do not specify a process for validating or sanitizing the content returned by the documentation tools before implementation.
Audit Metadata