research
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external primary sources, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: The agent is instructed to investigate questions against external primary sources, including official documentation, source code, specifications, and first-party APIs (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to the agent to ignore or isolate potential instructions embedded within the research material.
- Capability inventory: The skill allows the agent to write research findings to Markdown files within the repository.
- Sanitization: There are no specified sanitization, validation, or escaping mechanisms for the content fetched from external sources before it is processed or written to the filesystem.
Audit Metadata