user-personas
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (CSV, Excel, interview transcripts) provided by the user, which could potentially contain malicious instructions meant to influence the agent. 1. Ingestion points: Research data and documents provided as input (SKILL.md). 2. Boundary markers: The instructions do not define explicit delimiters to separate user-provided data from system instructions. 3. Capability inventory: The skill uses standard file-reading tools to process research data. 4. Sanitization: The skill does not implement specific sanitization or filtering for the content of the research data.
Audit Metadata