srezai-research

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external search results and citations, which could potentially harbor malicious instructions designed to influence the agent's behavior. 1. Ingestion points: The agent receives external information through the outputs of the srezai verify, answer, and deep commands. 2. Boundary markers: The skill includes a clear rule stating that sources and quotes are data, not instructions, which helps the agent distinguish between its mission and third-party content. 3. Capability inventory: The agent has access to the srezai CLI through the Bash tool. 4. Sanitization: The instructions prompt the agent to cross-reference citations with the source text to ensure accuracy.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 09:27 AM