research
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process information from external primary sources such as official documentation, source code, and APIs. This surface creates a vulnerability to indirect prompt injection if the external sources contain malicious instructions meant to influence the agent's behavior.\n
- Ingestion points: External official documentation, source code, and API specifications as specified in
SKILL.md.\n - Boundary markers: Absent; the instructions do not include specific delimiters or directives for the agent to distinguish between data to be researched and potential instructions within that data.\n
- Capability inventory: The skill authorizes the agent to write Markdown files to the local repository as described in
SKILL.md.\n - Sanitization: Absent; there is no requirement or mechanism mentioned for sanitizing or validating retrieved external content before it is committed to the repository.
Audit Metadata