analyze-prime-numbers
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by ingesting untrusted user data intended for use with the enabled Bash tool.
- Ingestion points: The 'Inputs' section of SKILL.md accepts user-specified integers and bounds.
- Boundary markers: Absent; there are no instructions to delineate user-provided data from system instructions or use protective delimiters.
- Capability inventory: The skill specifies 'Read' and 'Bash' as allowed tools in the frontmatter.
- Sanitization: The procedure lacks instructions for validating or escaping user inputs before they are processed by tools.
- [NO_CODE]: The skill consists entirely of markdown documentation and instructions and does not include any executable scripts or binary files.
Audit Metadata