swing-research
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection by ingesting and processing untrusted data from the public web.
- Ingestion points: The skill utilizes
WebSearchandWebFetchin the 'Search & Collect' stage (Stage 2) of its research pipeline to retrieve external content. - Boundary markers: Absent. The instructions do not define any delimiters or provide specific instructions to the agent to treat fetched data as untrusted or to ignore any embedded commands within that data.
- Capability inventory: The skill's environment includes tools for web interaction (
WebSearch,WebFetch), file system access (Read,Grep,Glob), and shell execution (Bash). - Sanitization: Absent. There are no mechanisms specified to sanitize, escape, or validate the content retrieved from external sources before it is analyzed and synthesized into the final report.
Audit Metadata