what-now
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from other installed SKILL.md files to formulate its recommendations.
- Ingestion points: The skill reads the full content of other discovered skills and project documentation as described in Step 2 of SKILL.md.
- Boundary markers: The instructions do not require the use of explicit delimiters or 'ignore' warnings when the agent interpolates the content of external skills into its analysis.
- Capability inventory: The skill includes strong restrictive instructions that limit it to a read-only role; it is explicitly forbidden from invoking candidates, modifying files, or initiating workflows.
- Sanitization: No specific sanitization or escaping of the ingested skill content is defined in the instructions.
Audit Metadata