error-handling
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The file
references/anti-rationalization.mdemploys behavioral override techniques to ensure agent adherence to its instructions. - It defines an 'IRON LAW' described as 'non-negotiable' to mandate specific coding practices.
- The content explicitly documents the use of 'Authority language + commitment statements' to 'trigger compliance mechanisms in LLM decision-making' and 'pre-rebut' rationalizations.
- This represents a deliberate attempt to use meta-instructions to bypass the model's standard reasoning processes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data (user source code) and possesses capabilities to modify files and execute tasks.
- Ingestion points: The agent reads user-provided code, specifications, and requirements to design error hierarchies or implement handlers (identified in
SKILL.mdandreferences/tdd-patterns.md). - Boundary markers: The instructions lack explicit delimiters or warnings (e.g., 'ignore embedded instructions') to protect the agent when analyzing potentially malicious user code.
- Capability inventory: The skill provides logic for creating API responses, integrating tracking, and implementing recovery patterns which involve file writing and tool use (
Tasktool mentioned inSKILL.md). - Sanitization: There is no evidence of input validation or sanitization for the code snippets provided for analysis.
Audit Metadata