research
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes WebFetch and git clone to download content from arbitrary external URLs and repositories provided during research tasks.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to perform repository operations such as git clone and rm -rf within the /tmp/ directory for source-level analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from the internet and external codebases. This creates a potential attack surface where malicious instructions hidden in the researched content could attempt to influence the agent's actions.
- Ingestion points: External content is brought into the agent's context via WebFetch (SKILL.md) and git clone (references/repo-cloning-pattern.md).
- Boundary markers: The instructions do not specify the use of protective delimiters or instructions to ignore embedded commands when reading fetched content.
- Capability inventory: The agent has access to powerful tools including Bash, Task, and WebFetch across its operation scripts.
- Sanitization: There is no evidence of content sanitization or filtering before the agent processes the external data.
Audit Metadata