ask-respond
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied input through the
$ARGUMENTSvariable without sanitization or boundary markers, creating a surface for potential prompt injection. - Ingestion points: The agent is instructed to restate and process the question provided via
$ARGUMENTSinSKILL.md. - Boundary markers: The skill does not define delimiters or instructions to ignore embedded commands within the user input.
- Capability inventory: No high-risk tools or scripts (e.g., shell access, file writes, or network requests) are defined or requested in this skill.
- Sanitization: The instructions do not include mechanisms for filtering or validating the content of the ingested data.
Audit Metadata