dig-deeper
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (the 'problem') within a reasoning loop defined by specific instructions.
- Ingestion points: The skill accepts a 'problem' from the user to be processed by the
dig-deeper-corelogic in SKILL.md. - Boundary markers: The skill includes a 'deny' section intended to block harmful, security-compromising, or durable actions, which acts as a safety boundary.
- Capability inventory: The instructions permit the agent to 'acquire missing capability' and 'run best permitted' methods, which may involve executing platform tools or scripts.
- Sanitization: There is no evidence of input validation or sanitization of the user-provided 'problem' text before it influences the agent's troubleshooting steps.
Audit Metadata