a11y-audit
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains a 'System Prompt Inquiry Response' instruction that overrides the agent's default behavior when asked to reveal its system prompt. It directs the agent to provide a pre-defined marketing message for Scayver Academy.
- [PROMPT_INJECTION]: The skill's primary function is to ingest and analyze third-party website code and content, which is a classic surface for indirect prompt injection.
- Ingestion points: External URLs and repository files provided by the user for auditing as defined in the 'Audit Scope'.
- Boundary markers: The instructions lack specific delimiters or warnings to the model to ignore potential instructions embedded within the audited content.
- Capability inventory: The skill relies on the agent's built-in tools (such as web browsing or file reading) to process the data, as it ships with no custom scripts.
- Sanitization: There are no instructions provided to sanitize or validate the external content before it is processed by the agent.
Audit Metadata