topic-deep-dive
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from multiple external sources including web search, social media, and academic databases.
- Ingestion points: Data enters through
exa_search,tavily_search,reddit_app_dynamic_search,twitter_web_search_timeline, andgoogle_news_bulk_articlestools mentioned inSKILL.mdandreferences/sandbase-api-map.md. - Boundary markers: No specific delimiters or safety instructions are defined for processing external data to prevent the agent from following instructions embedded in research material.
- Capability inventory: The skill is restricted to read-only research tools and synthesis; it contains no file system write operations, network exfiltration commands, or dynamic code execution capabilities, which significantly limits the risk of injection exploitation.
- Sanitization: No explicit sanitization or filtering of the ingested external content is described.
- [SAFE]: The skill follows a structured workflow that requires confirming tool schemas before execution and strictly limits activities to read-only research, preventing common attack vectors like data exfiltration or persistence.
Audit Metadata