use-case-testing
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data through the
$ARGUMENTSvariable to establish the testing context. This represents an attack surface where instructions embedded within the user-provided feature specifications could attempt to manipulate the agent's behavior. - Ingestion points: The Context section of
SKILL.mdinterpolates the$ARGUMENTSvariable directly into the agent's persona instructions. - Boundary markers: The skill does not define clear boundaries or 'ignore' instructions to separate user-provided content from the skill's operational logic.
- Capability inventory: The skill contains no executable scripts, tool calls, or network operations, which significantly mitigates the potential impact of an injection.
- Sanitization: There is no evidence of input sanitization or validation performed on the user-provided arguments.
Audit Metadata