prompt-improver
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites and local codebase files during its research phase to gather context for prompt improvement.
- Ingestion points: The workflow detailed in
references/research-strategies.mdusesWebSearch,WebFetch,Glob,Grep, andReadtools to access potentially untrusted content from the internet and the local filesystem. - Boundary markers: The instructions in
SKILL.mdand the associated reference files do not prescribe the use of delimiters or specific directives (such as "ignore embedded instructions") when processing the gathered research content. - Capability inventory: The agent maintains access to powerful capabilities including command execution via
Bash(used forgitandnpm testin examples) and file-writing viaTodoWriteas outlined inSKILL.mdandreferences/examples.md. - Sanitization: No sanitization or validation of the data retrieved from external sources is specified before it is used to ground questions or execute the final transformed request.
Audit Metadata