skill-safety-audit
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external data (other skills and scripts), which creates a potential surface for indirect prompt injection. Maliciously crafted content in an audited file could attempt to subvert the agent's evaluation.\n
- Ingestion points: The skill accepts directories, scripts, and references as inputs for review (SKILL.md).\n
- Boundary markers: The instructions do not define specific delimiters to separate the audited content from the auditor's instructions.\n
- Capability inventory: The skill is limited to analysis and reporting based on the provided inputs.\n
- Sanitization: There are no explicit instructions to sanitize or escape the content being audited before processing.\n- [NO_CODE]: The provided skill is a documentation-based set of instructions. It does not contain any executable scripts, automated installation steps, or binary files.
Audit Metadata