discovery-call
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill attempts to ingest project-specific information from a local context file, which creates a theoretical surface where malicious instructions in that file could influence agent behavior.
- Ingestion points: Accesses data from
.agents/sales-context.md(SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present when reading the file.
- Capability inventory: None. The skill does not invoke any system commands, network tools, or file-writing capabilities.
- Sanitization: No sanitization or validation of the file content is performed before processing.
Audit Metadata