be-range-ambitious
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes the user's previously provided task as input to generate a broadened version of that task. This ingestion of untrusted data creates a potential surface where embedded instructions in the user's task could influence the agent's output.
- Ingestion points: User's previous task input interpolated into the prompt instructions in SKILL.md.
- Boundary markers: None specified to delimit the user input from the skill's instructions.
- Capability inventory: The skill is restricted to prompt rewriting; it has no access to tools, the filesystem, or network operations.
- Sanitization: No sanitization or validation of the input content is performed.
- [NO_CODE]: The skill is composed entirely of natural language instructions and configuration metadata. It does not include scripts, binaries, or any automated execution logic.
Audit Metadata