research
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of ingesting external data from primary sources. \n
- Ingestion points: The agent reads and investigates official documentation, source code, specs, and APIs (SKILL.md). \n
- Boundary markers: The instructions lack explicit boundary markers or warnings to the agent to disregard instructions embedded within the research material. \n
- Capability inventory: The skill utilizes file-writing capabilities to save findings as Markdown files within the repository (SKILL.md). \n
- Sanitization: There is no evidence of content sanitization or validation performed on the external data before it is written to the repository.
Audit Metadata