to-questionnaire
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input to generate a questionnaire file, creating a surface for potential indirect prompt injection.
- Ingestion points: User input provided during the interview regarding the recipient's role, expertise, and specific information needs (SKILL.md).
- Boundary markers: Absent; there are no instructions to use delimiters or ignore embedded instructions within user-provided content.
- Capability inventory: The agent possesses the capability to write files to the local file system (SKILL.md).
- Sanitization: Absent; the skill does not specify any filtering or validation of user input before writing it to the Markdown file.
Audit Metadata