grilling
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to autonomously fetch information from the environment to answer questions, creating a vector for instructions embedded in data to influence agent behavior.
- Ingestion points: The agent is instructed to use tools and sub-agents to find "facts from the environment (filesystem, tools, etc.)" in
SKILL.md. - Boundary markers: There are no delimiters or "ignore embedded instructions" warnings for the environmental data.
- Capability inventory: The skill has access to tools and the filesystem via sub-agents, as described in
SKILL.md. - Sanitization: No escaping or validation of external content is specified.
Audit Metadata