tahr-review-tahr-findings
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external security findings which could theoretically contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data enters the context through
list_findingsandget_findingtools as defined inSKILL.md. - Boundary markers: The skill does not define specific delimiters to isolate external content from the prompt instructions.
- Capability inventory: The available toolset is restricted to read-only queries (
list_applications,get_application,list_assessments,list_findings,get_finding), minimizing the impact of potential injections. - Sanitization: No explicit sanitization or escaping of external finding content is required by the instructions.
Audit Metadata