synthesize-evidence-brief
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of instructional Markdown documentation. No scripts (.sh, .py, .js), binaries, or configuration files that trigger code execution were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to synthesize external data, which introduces an indirect injection surface. 1. Ingestion points: The skill instructions in 'SKILL.md' describe processing 'multi-source evidence' and literature. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present. 3. Capability inventory: The skill does not define or use any tools that allow file writing, network access, or command execution. 4. Sanitization: No input validation or content filtering is specified.
- [SAFE]: The instructions are limited to methodology for evidence appraisal and synthesis. There are no patterns suggesting data exfiltration, credential harvesting, or persistence.
Audit Metadata