summarize
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as URLs, PDFs, and articles.
- Ingestion points: The workflow in
SKILL.mdfetches content from user-provided URLs or files using thefetch-contenttool or standard web fetchers. - Boundary markers: The instructions lack explicit delimitation or specific "ignore embedded instructions" warnings for the fetched content.
- Capability inventory: No high-risk capabilities, such as file-system writes or arbitrary command execution, are present in this skill.
- Sanitization: No sanitization or validation of the fetched content is specified before the summarization process begins.
Audit Metadata