phoenix-scope-cutter
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input and writes to the file system, creating a vulnerability surface for indirect prompt injection.\n
- Ingestion points: The skill ingests 'CLEAN_CONTEXT' derived from previous agent roles, which may contain untrusted data.\n
- Boundary markers: There are no explicit boundary markers or instructions to the model to ignore embedded commands within the ingested context.\n
- Capability inventory: The skill is authorized to write structured markdown output to the local 'outputs/' directory.\n
- Sanitization: No sanitization or filtering is applied to the incoming context data before it is processed by the agent.
Audit Metadata