google-cloud-solution-rag-enterprise-search-gke-sqldb

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface where untrusted user input could influence the generation of validation scripts.
  • Ingestion points: Phase 1 (Requirements discovery) in SKILL.md gathers detailed functional and non-functional requirements from the user.
  • Boundary markers: The skill includes instructions to resolve ambiguities but lacks specific delimiters or security-focused boundary markers to ensure embedded instructions in the user data are ignored.
  • Capability inventory: In Phase 3, the skill has the capability to generate and execute commands using tools like curl or gcloud for architecture validation.
  • Sanitization: There is no explicit mention of sanitizing or escaping the user-provided requirement data before it is used to generate the validation commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:41 AM
Security Audit — agent-trust-hub — google-cloud-solution-rag-enterprise-search-gke-sqldb