research
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to investigate external primary sources such as official documentation, source code, and APIs. This introduces an attack surface where malicious instructions could be embedded in the data being researched.
- Ingestion points: External official docs, source code, and first-party APIs mentioned in
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions found within the source material.
- Capability inventory: The skill utilizes file system write capabilities to save Markdown findings into the repository as specified in
SKILL.md. - Sanitization: No explicit sanitization or filtering of external content is defined in the instructions.
Audit Metadata