product-name
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a standard prompt for generating product names. It does not perform any network operations, file system access, or command execution.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided context through the
$ARGUMENTSvariable inSKILL.md. While this creates a surface for processing untrusted data, the skill has no dangerous capabilities, limiting the potential impact. - Ingestion points: User input is interpolated via the
$ARGUMENTSplaceholder in the prompt section ofSKILL.md. - Boundary markers: The prompt does not use specific delimiters or instructions to isolate the interpolated user data.
- Capability inventory: The skill has no tools, shell execution, or network access enabled.
- Sanitization: No validation or sanitization is performed on the user-supplied arguments.
Audit Metadata