grant-proposal
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from externally generated research specifications (e.g.,
research_spec_*.md) and interpolates this content into grant proposal sections. This constitutes an indirect prompt injection surface where the source data could potentially influence agent behavior if it contains instructional text. - Ingestion points: The skill reads input from the file path provided in the
--inputargument or automatically locates files inquality_reports/specs/during Phase 0. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions to wrap the external content during the scaffolding process.
- Capability inventory: The skill is granted
WriteandTaskcapabilities, which are used to generate markdown files and invoke secondary skills like/data-management-planand/capture-environment. - Sanitization: The skill does not explicitly sanitize or filter the content extracted from the research specs, although it does include a directive to not 'fabricate science' if the spec is missing.
Audit Metadata