explain
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external content from URLs or user input, which creates a potential surface for indirect prompt injection attacks where instructions embedded in the source content could attempt to influence the agent's behavior.
- Ingestion points: Workflow step 1 in
SKILL.mdinvolves fetching content via a script or accepting pasted text. - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious commands within the external content.
- Capability inventory: The skill is limited to content explanation and glossary generation; no dangerous capabilities like shell command execution or file system modification are included.
- Sanitization: There is no mention of input sanitization or filtering, although the skill includes instructions for the agent to critically evaluate and flag incorrect claims in the content.
Audit Metadata