clarify-message
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define a benign facilitation workflow for clarifying user intent and structuring content. It does not include any executable code, network operations, or sensitive file access.- [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection by processing untrusted user input. 1. Ingestion points: Material gathering in 'Phase 2' of SKILL.md. 2. Boundary markers: Absent; user input is processed directly into the facilitation flow. 3. Capability inventory: No high-risk capabilities identified; the skill is restricted to text generation and interactive questioning. 4. Sanitization: Absent. The finding is assessed as safe because the skill lacks the ability to perform sensitive operations like file writing or network requests.
Audit Metadata