prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of markdown documentation and reference materials. It contains no executable scripts or malicious instructions.
- [PROMPT_INJECTION]: The skill contains defensive patterns and templates designed to prevent prompt injection (e.g., instruction hierarchy, delimiters, and input sanitization checklists). Deterministic detection of injection-related keywords is a false positive, as these terms appear exclusively within the context of security guidance and defense documentation.
- [INDIRECT_PROMPT_INJECTION]: While the skill discusses processing user inputs, it focuses on teaching users how to build secure systems, providing multiple layers of defense, boundary markers (separators), and sanitization strategies to mitigate this risk.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. Code snippets provided (such as Python implementation templates for agents or reviewers) are generic templates for educational use and contain warnings about security risks like arbitrary code execution.
- [DATA_EXFILTRATION]: The skill promotes data privacy best practices, including PII detection, pseudonymization, and secret management.
Audit Metadata