hindenburg-investigation
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and YAML metadata without any executable scripts, shell commands, or network operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data such as primary documents and research materials, which introduces a potential surface for indirect prompt injection.\n
- Ingestion points: The skill processes user-supplied research materials and primary documents referenced in SKILL.md.\n
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the analyzed documents.\n
- Capability inventory: No scripts or tool invocations are present in the skill files, limiting the agent to text-based analysis.\n
- Sanitization: No input sanitization or validation logic is implemented.
Audit Metadata