sq3r-reading
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data, specifically textbook chapters, articles, and reports provided by the user. This creates a surface for indirect prompt injection where instructions hidden within the study material could attempt to influence the agent's behavior or output.
- Ingestion points: The skill accepts user-provided text, headings, and summaries in the "What to ask for" section of SKILL.md.
- Boundary markers: There are no explicit instructions to use delimiters or to disregard potential instructions embedded within the source text.
- Capability inventory: The skill possesses the capability to write and save notes through external tools, such as the Scratchpad connector or generic notes tools.
- Sanitization: The instructions do not specify any validation, sanitization, or filtering of the content being summarized and saved.
Audit Metadata