fable5
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate an attack surface by ingesting external data while providing access to sensitive capabilities. * Ingestion points: The reasoning protocol (Move 2
- GROUND) explicitly directs the agent to fetch documents and read files to verify facts. * Boundary markers: The skill does not provide specific instructions or delimiters to isolate retrieved external data from the agent's core instructions. * Capability inventory: The skill leverages powerful capabilities including code execution, file reading/writing, and network fetching (Move 2 and Harness Leverage sections). * Sanitization: There are no explicit requirements or steps defined to sanitize, escape, or filter content retrieved from external sources before processing it through the reasoning loops.
Audit Metadata