prd
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external information from search and scraping tools into its drafting process, which is a standard requirement for its primary purpose.
- Ingestion points: External content is retrieved via the
tavily_searchandcontext_dev_scrape_markdowntools as defined inreferences/sandbase-api-map.md. - Boundary markers: The instructions do not define specific delimiters for separating external tool output from the core system prompt.
- Capability inventory: The skill utilizes the vendor's
sandbase_call_toolandsandbase_describe_toolfor data retrieval. - Sanitization: There is no explicit requirement for the agent to sanitize or escape the content fetched from external sources before including it in the generated document.
Audit Metadata