logic-explain
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it is designed to ingest and trace untrusted code and input scenarios provided by the user. While the skill instructs the agent on how to explain this code, it does not include security boundaries to prevent the agent from potentially following instructions embedded within the analyzed code.\n
- Ingestion points: User-provided code snippets and scenario descriptions defined in
SKILL.md(Step 0) andlogic-explain-guide.md(Step 1).\n - Boundary markers: Absent; there are no instructions to use delimiters or to treat the input code purely as data to be described rather than executed or obeyed.\n
- Capability inventory: The skill is restricted to generating text-based execution traces and reports; no subprocess calls, file-write operations, or network tools are utilized.\n
- Sanitization: No sanitization, escaping, or validation of the input code is specified in the instructions.
Audit Metadata