middleware-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and validate external data from message brokers and middleware systems, creating an inherent surface for indirect prompt injection.
- Ingestion points: The skill frequently consumes external message data using
broker.consume()across various test scenarios defined inSKILL.md. - Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from interpreting instructions that might be embedded within message payloads.
- Capability inventory: The skill utilizes network-capable tools including
httpClient,soapClient, and message broker clients (broker.publish) which could be leveraged if a malicious message were to influence agent behavior. - Sanitization: The patterns focus on structural and content validation (e.g., schema checks, field assertions), providing a layer of verification for the processed data.
Audit Metadata