title-expert
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted property data from JSON files and incorporates it into reports for analysis by the AI agent. This ingestion creates a potential surface for indirect prompt injection if input descriptions contain adversarial instructions.
- Ingestion points:
modules/validators.pyandencumbrance_discount_calculator/modules/validators.pyload property and encumbrance data from user-provided files. - Boundary markers: Absent; the data is interpolated into Markdown headers and lists in the generated reports without strict delimiters.
- Capability inventory: The skill possesses file-writing capabilities to save analysis reports in Markdown and JSON formats (
modules/output_formatters.py). - Sanitization: No explicit sanitization or filtering is performed on descriptive text fields before they are presented to the agent.
Audit Metadata