functions
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a reference for querying databases, which involves processing potentially untrusted data from external sources like binary analysis results.\n
- Ingestion points: SQL query results from database tables such as
funcs,instructions, andimports(SKILL.md).\n - Boundary markers: The documentation does not specify the use of delimiters or warnings to ignore instructions embedded in data.\n
- Capability inventory: The skill identifies
BashandReadas allowed tools (SKILL.md frontmatter).\n - Sanitization: There is no mention of sanitizing or escaping the data retrieved from the database before it is processed by the agent.
Audit Metadata