wholehog-score
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to evaluate external content such as code, designs, plans, and repository states. This creates a potential attack surface where instructions hidden within these analyzed artifacts could attempt to influence the agent's behavior during the evaluation process.
- Ingestion points: The skill evaluates "implementation, design, plan, feature, document, or repo state" provided as input to the agent (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or provide guidance to the agent to disregard instructions embedded within the content being evaluated.
- Capability inventory: The skill itself does not contain executable scripts, subprocess calls, or network operations.
- Sanitization: There are no instructions for sanitizing or escaping the content before the agent processes it for scoring.
Audit Metadata