swing-options
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied decision questions or scenarios as its primary input, which creates a potential surface for indirect prompt injection.
- Ingestion points: User input is accepted through the
[decision or question to explore]argument defined in the YAML frontmatter and used throughout the generation process. - Boundary markers: The skill lacks explicit boundary markers or instructions for the agent to treat the user-supplied decision content as untrusted data or to ignore embedded instructions within that content.
- Capability inventory: The skill is configured with access to high-privilege tools including
Bash,WebFetch,WebSearch, andAgent(as seen in theallowed-toolsmetadata), which could be leveraged if an attacker embeds commands within a decision prompt. - Sanitization: No sanitization, validation, or escaping of the user-provided decision text is specified in the instructions.
Audit Metadata