source-driven-development
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and process data from external sources, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: The agent reads local dependency manifests (e.g.,
package.json,requirements.txt) and fetches content from external documentation websites (e.g.,react.dev,docs.djangoproject.com). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The agent possesses the capability to read local files and perform network requests to retrieve remote content, subsequently using this data to generate and implement code.
- Sanitization: There is no mention of sanitizing, escaping, or validating the content retrieved from external URLs before it is processed by the model.
Audit Metadata