validation-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill features an attack surface for indirect prompt injection, as it is designed to read and analyze the content of documents provided by users or external sources.
- Ingestion points: The
Readtool is utilized in Step 1 of the workflow to import content from target files (e.g.,docs/requirements.md) into the agent's execution context. - Boundary markers: The instructions lack explicit delimiting of ingested document content or specific guidance for the model to disregard any embedded instructions within the analyzed text.
- Capability inventory: The skill possesses capabilities to read local files and write to long-term storage via the
memory storecommand, creating a read-then-persist chain for potentially compromised data. - Sanitization: There is no evidence of filtering, escaping, or schema-based validation applied to the raw document content before it is processed by the 13 validation steps.
Audit Metadata