backlink-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data, creating a surface for indirect prompt injection attacks.
- Ingestion points: The workflow relies on SandBase tools for "search, scraping, and enrichment" of external evidence from potentially untrusted web sources (SKILL.md).
- Boundary markers: The instructions do not specify technical boundary markers (like delimiters) or explicit instructions for the agent to ignore control sequences in the ingested data.
- Capability inventory: The skill is instructed to produce "artifacts" (involving file-writing) and execute external tool calls via
sandbase_run. - Sanitization: There is no mention of sanitization, filtering, or escaping of the content retrieved from external sources before it is processed by the agent.
Audit Metadata