Camp Planner Setup
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. In Step 2 (Group 2), the skill conducts web searches and downloads external PDF files (school calendars) to extract data. This represents a potential surface for indirect prompt injection if an attacker were to poison a school's public calendar files.
- Ingestion points: Web search results and downloaded PDF files processed by the agent in
SKILL.md. - Boundary markers: No specific delimiters or "ignore instructions" markers are defined for the extracted calendar data.
- Capability inventory: The skill utilizes the
Writetool to save data to the local filesystem and theAskUserQuestiontool to interact with the user. - Sanitization: No explicit sanitization or validation of the downloaded content is specified before processing.
- [EXTERNAL_DOWNLOADS]: The skill performs automated downloads of school calendar documents from the web during the setup phase. This is a functional requirement for its stated purpose of automating camp schedule planning.
Audit Metadata