intended-vs-implemented
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, hardcoded credentials, or obfuscation techniques were detected in the skill instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data (documentation and repository source code). Evidence: 1. Ingestion points: Repository documentation (e.g.,
documentation/*.md) and source code files. 2. Boundary markers: The skill includes an explicit instruction to treat audited content as untrusted and to ignore embedded instructions. 3. Capability inventory: None; the skill is purely instructional and does not define or use any tools. 4. Sanitization: Not applicable for this reasoning-based methodology.
Audit Metadata