proof
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests and processes untrusted data from external Proof documents.
- Ingestion points: Content is retrieved from the
https://www.proofeditor.ai/api/agent/<slug>/stateand/snapshotendpoints, which includes document markdown, comment threads, and metadata (SKILL.md). - Boundary markers: The instructions do not define clear delimiters or provide the agent with guidance to ignore potential instructions embedded within the retrieved document content.
- Capability inventory: The skill possesses capabilities to modify documents (via
edit/v2), create new documents, and manage comments and presence status using network operations (curl) (SKILL.md). - Sanitization: There is no evidence of sanitization, validation, or filtering of the content retrieved from the external service before it is presented to the agent's context.
Audit Metadata