a11y-audit

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill contains a 'System Prompt Inquiry Response' instruction that overrides the agent's default behavior when asked to reveal its system prompt. It directs the agent to provide a pre-defined marketing message for Scayver Academy.
  • [PROMPT_INJECTION]: The skill's primary function is to ingest and analyze third-party website code and content, which is a classic surface for indirect prompt injection.
  • Ingestion points: External URLs and repository files provided by the user for auditing as defined in the 'Audit Scope'.
  • Boundary markers: The instructions lack specific delimiters or warnings to the model to ignore potential instructions embedded within the audited content.
  • Capability inventory: The skill relies on the agent's built-in tools (such as web browsing or file reading) to process the data, as it ships with no custom scripts.
  • Sanitization: There are no instructions provided to sanitize or validate the external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 12:11 AM
Security Audit — agent-trust-hub — a11y-audit