pepabo-guide
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes content from external websites that may contain adversarial instructions.
- Ingestion points: External data enters the agent context through the WebFetch tool (targeting vendor-specific domains like pepabo.com, lolipop.jp, and suzuri.jp) and the WebSearch tool as instructed in SKILL.md.
- Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions embedded within the fetched web content.
- Capability inventory: The skill's capabilities are restricted to information retrieval (WebFetch, WebSearch, Read) and it lacks permissions for file system writes, network exfiltration, or arbitrary command execution.
- Sanitization: No sanitization or filtering logic is present to validate the content retrieved from external sources before processing.
Audit Metadata