biomarker-investigation-zhcn
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content (patents, research papers, clinical trial data), creating a surface for indirect prompt injection attacks.
- Ingestion points: External data enters the agent context through tools such as
ls_patent_fetch,ls_paper_fetch,ls_clinical_trial_fetch, andls_news_fetchin SKILL.md. - Boundary markers: Absent. There are no instructions or delimiters defined to isolate external data or tell the agent to ignore potentially malicious embedded instructions.
- Capability inventory: The agent has access to various data retrieval tools (as listed in SKILL.md) and a web search capability.
- Sanitization: Absent. No filtering or sanitization steps are defined for the external text before it is processed by the agent.
Audit Metadata