mql5-docs-research
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to fetch and process content from external web pages, which is a potential surface for indirect prompt injection if the external content contains malicious instructions.
- Ingestion points: The skill reads documentation from
https://www.mql5.com/ja/docsandhttps://www.mql5.com/en/docsas defined inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings to separate external documentation content from the agent's internal reasoning or to ignore instructions found within the fetched text.
- Capability inventory: The skill is limited to documentation research and does not include capabilities for file writing, system command execution, or network exfiltration.
- Sanitization: There is no logic provided to sanitize, filter, or validate the content retrieved from the external documentation pages before it is processed by the agent.
Audit Metadata