pattern-detection
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external data (existing codebase files) during the 'Pattern Discovery Process'. This introduces a surface for indirect prompt injection if the files being surveyed contain malicious instructions disguised as code patterns.
- Ingestion points: Local codebase files (SKILL.md, 'Survey representative files').
- Boundary markers: Absent. The instructions do not specify using delimiters or 'ignore embedded instructions' warnings when processing these files.
- Capability inventory: None. The skill itself provides procedural instructions rather than requesting specific tool access or performing system operations.
- Sanitization: Absent. There is no mention of filtering or validating the content of the surveyed files before the agent adopts discovered patterns.
Audit Metadata