qa-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses the
$ARGUMENTSplaceholder to ingest user-provided data directly into the agent's context without clear boundary markers or sanitization. - Ingestion points:
SKILL.md(Context section) - Boundary markers: None identified
- Capability inventory: The skill does not define any executable tools or scripts
- Sanitization: None identified
- [NO_CODE]: The skill consists entirely of Markdown instructions and does not include any scripts, dependencies, or tool definitions.
Audit Metadata