trace-logic
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it incorporates untrusted user data into its core logic workflow.
- Ingestion points: The skill uses the
$ARGUMENTSvariable inSKILL.mdto define the target for logical tracing. - Boundary markers: There are no XML tags, triple quotes, or specific instructions to ignore embedded commands within the user-provided input.
- Capability inventory: Analysis of
SKILL.mdshow the skill is restricted to textual analysis and logical decomposition; it does not utilize tools for file system access, network requests, or shell execution. - Sanitization: The instructions do not include any logic to sanitize or escape the input data.
- [EXTERNAL_DOWNLOADS]: The README.md contains links and instructions to download resources from the vendor's repository.
- Evidence: The documentation refers to
https://github.com/synapseradio/ai-skillsfor installation vianpxand provides a direct download link for the.skillfile athttps://github.com/synapseradio/ai-skills/raw/main/packaged/thinkies/trace-logic.skill.
Audit Metadata