arena
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes a 'fan-out' process where multiple sub-agents generate candidate outputs that the parent agent then reads end-to-end to synthesize a final artifact. This architecture presents a potential surface for indirect prompt injection if one of the candidates includes adversarial instructions intended to influence the judging or synthesis phase.
- Ingestion points: Candidate artifacts and rationales produced by sub-agents, typically stored in
.tmp/arena-<slug>/candidate-<n>/. - Boundary markers: The workflow does not explicitly define delimiters or instructions for the agent to ignore embedded commands within the candidate artifacts.
- Capability inventory: The skill orchestrates sub-agent spawning, file reads for evaluation, and writing the final synthesized result.
- Sanitization: No sanitization or validation logic is specified for the sub-agent generated content before it is processed by the judge or parent agent.
Audit Metadata