prompt-injection-defense
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide defensive security guidance and tools. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/audit_boundary_manifest.py) for linting JSON security manifests. The script is a static validator that utilizes only standard Python libraries (json, re, argparse, etc.) and does not execute the data it processes or perform any dangerous system operations. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and provides mitigation strategies for indirect prompt injection. It implements architectural safeguards by providing a strict schema validator for external data and instructing the agent to treat processed content as untrusted data rather than executable instructions.
- [EXTERNAL_DOWNLOADS]: The documentation references external security guidelines and cheat sheets from well-known trusted organizations, specifically OWASP and NIST, for educational and verification purposes.
Audit Metadata