deep
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied arguments and directly processes them as work items for downstream tasks.
- Ingestion points: User arguments passed to the skill during activation.
- Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded commands within the user arguments.
- Capability inventory: The skill has the authority to trigger a suite of other tools, including
drill,implement, andland. - Sanitization: There is no evidence of input validation or sanitization before passing user data to subsequent tools.
- [DYNAMIC_EXECUTION]: The skill dynamically modifies its operational logic by reading and applying instructions found within the
SKILL.mdfiles of other tools at runtime. This mechanism allows the agent's behavior to be defined by external file content which, if altered, could change the agent's execution flow.
Audit Metadata