explore
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
uv run researchkit. This is the primary mechanism for running the research pipeline and handles dependency management. - [INDIRECT_PROMPT_INJECTION]: The skill operates by researching external web content and processing 'materials', which are then synthesized into reports. This creates a surface where data from untrusted web sources could contain instructions designed to influence the agent's summary or behavior.
- Ingestion points: External web search results and documents provided via the
--materialsor--ingestflags (found inSKILL.mdWorkflow section). - Boundary markers: None explicitly defined in the instructions to separate untrusted web content from agent instructions.
- Capability inventory: The skill has the capability to execute commands (
uv run) and write files to the localprojects/directory (found inSKILL.mdWorkflow section). - Sanitization: No specific sanitization or filtering of external web content is described in the skill configuration.
Audit Metadata