strategize
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data as part of its primary reasoning workflow.
- Ingestion points: Data enters the agent context through the
$ARGUMENTSvariable in the 'Initialize' phase and via interactive user responses during the 'Understand' and 'Reason' phases. - Boundary markers: The skill does not employ specific delimiters (like XML tags or markdown blocks) or instructions to ignore embedded commands within the user-provided content.
- Capability inventory: The skill possesses no dangerous capabilities; it lacks access to tools for network operations, file system modification, or subprocess execution. It is limited to textual reasoning and dialogue.
- Sanitization: There is no evidence of input validation, filtering, or escaping for the data interpolated into the reasoning prompts.
Audit Metadata