tool-foundation-sprint-differentiation
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data artifacts.
- Ingestion points: The skill reads the 'Basics bundled artifact' to extract the target customer, problem, and competitive advantages (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or 'ignore embedded instructions' warnings for the input data, potentially allowing instructions hidden in the artifact to influence agent behavior.
- Capability inventory: The skill does not require or utilize tools for network exfiltration, file system modification, or dynamic code execution, which significantly limits the impact of any injection.
- Sanitization: There is no evidence of content sanitization or validation for the provided artifacts.
Audit Metadata