security-check
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill's instructions and configuration files found no evidence of prompt injection, data exfiltration, obfuscation, or unauthorized command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill processes external 'candidates,' 'changed surfaces,' 'assets,' and 'data paths' as defined in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or 'ignore' instructions for the processed content.
- Capability inventory: The skill does not contain any scripts, tools, or executable commands (e.g., subprocess, network operations, file writes) in the provided files.
- Sanitization: No evidence of sanitization or validation of the ingested data was found.
Audit Metadata