active-listening-echo-chamber
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to rephrase user input by 'mirroring their exact prose and sentence structure'. This creates a vulnerability surface where a user could provide text containing malicious instructions that the agent might inadvertently execute or amplify while attempting to fulfill the rephrasing request.
- Ingestion points: User input provided during runtime interactions (SKILL.md).
- Boundary markers: Absent. The instructions do not specify any delimiters or safety warnings to distinguish between the user's data and embedded instructions.
- Capability inventory: The skill contains no scripts and has no access to shell commands, file systems, or network operations, limiting the impact of any successful injection to the conversation text.
- Sanitization: Absent. There is no logic to filter or validate the content of the user's prose before the agent mirrors it.
- [NO_CODE]: The skill is composed entirely of natural language instructions and examples. It does not include any executable scripts, binary files, or external dependencies.
Audit Metadata