genkit-flows-js
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to retrieve and process external Genkit documentation using the
read_genkit_docstool. This creates a surface for indirect prompt injection where adversarial content hidden in documentation could influence the agent's auditing or code generation tasks. \n - Ingestion points: Documentation retrieved through
read_genkit_docs(SKILL.md). \n - Boundary markers: No delimiters or instructions to ignore embedded instructions within retrieved documents are defined. \n
- Capability inventory: The skill allows the agent to generate and audit JavaScript and TypeScript code, which could be misused if influenced by malicious documentation. \n
- Sanitization: There are no instructions provided to sanitize or filter the content of the retrieved documents.
Audit Metadata