connectedness
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external text snippets from topological textbooks within the
Key Techniquessection, which presents a potential vulnerability surface. - Ingestion points: Text blocks quoted from 'Introduction to Topological Manifolds' and 'Topology (Munkres)' in the
Key Techniquessection. - Boundary markers: These snippets are included without specific delimiters or instructions to the agent to ignore any embedded directives within the quoted text.
- Capability inventory: The skill possesses
BashandReadcapabilities, allowing it to execute system commands and read file content. - Sanitization: No sanitization or validation is applied to these external content blocks before they are presented to the agent.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run computational scripts viauv run. - Evidence: The commands
uv run python -m runtime.harness scripts/z3_solve.pyanduv run python -m runtime.harness scripts/sympy_compute.pyare defined to solve proofs and simplify mathematical expressions. - The skill relies on local scripts located in the
scripts/directory to perform its primary functions.
Audit Metadata