grilling
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process untrusted data from the user and the environment, which could be exploited to influence agent behavior.
- Ingestion points: The skill ingests user responses during the 'grilling' process and environment data (filesystem, tools) retrieved via sub-agents as described in SKILL.md.
- Boundary markers: Absent. The instructions do not provide delimiters or instructions to ignore embedded commands within the data fetched from the environment or user.
- Capability inventory: The skill utilizes sub-agents with access to the filesystem and external tools to find facts (SKILL.md).
- Sanitization: Absent. There are no guidelines for escaping, filtering, or validating content retrieved from the environment before it is incorporated into the agent's context.
Audit Metadata