de-ai-flavor
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted document content, which serves as a surface for indirect prompt injection attacks. \n
- Ingestion points: The agent reads document content from files in the docs/ directory or from git diff using the Read and Grep tools (SKILL.md). \n
- Boundary markers: The skill's workflow and instructions do not specify the use of delimiters or boundary markers to distinguish between the skill's instructions and the document content being processed. \n
- Capability inventory: The skill utilizes the Edit tool to modify the local file system based on the analysis of the ingested document content. \n
- Sanitization: No sanitization or validation of the external content is performed before the agent processes and acts upon it.
Audit Metadata