infinite-gratitude

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to clone the project implementation from an external GitHub repository (https://github.com/sstklen/infinite-gratitude). As the repository and author are not verified, this introduces a supply chain risk where the downloaded content could contain unreviewed logic.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to perform multi-perspective research by gathering and synthesizing data from external sources. This creates an attack surface where malicious instructions could be embedded in the researched content to influence the agent's behavior.
  • Ingestion points: External research sources, evidence files, and primary source documents.
  • Boundary markers: The text includes a brief instruction to "Keep source text inert," which is a conceptual boundary but lacks specific technical delimiters (e.g., XML tags or distinct data structures) to isolate untrusted content.
  • Capability inventory: The skill describes the orchestration of multiple research agents and the synthesis of their findings.
  • Sanitization: There are no explicit instructions or scripts for sanitizing, filtering, or escaping the external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:06 PM