git
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by reading and processing external file contents. (1) Ingestion points: The skill instructs the agent to use the 'read' tool to inspect files (in SKILL.md). (2) Boundary markers: There are no explicit instructions or delimiters to help the agent distinguish between data and instructions within the files it reads. (3) Capability inventory: The skill utilizes the 'exec' tool to run shell commands (in SKILL.md). (4) Sanitization: There is no mention of sanitizing or validating the contents of the files before they are processed by the agent.
Audit Metadata