meta-knowledge-base-bootstrap
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface where external data can influence agent behavior.
- Ingestion points: Untrusted data from web search results (
outputs.ingest) is ingested into the agent context in theindexstep inSKILL.md. - Boundary markers: The
indexstep lacks delimiters or explicit instructions to the agent to disregard embedded commands within the interpolated search results. - Capability inventory: The skill possesses capabilities including executing other skills (
skill_exec), persisting data to the filesystem (memory_save), and generating spreadsheets (xlsx). - Sanitization: Although the skill employs
xml_escapeandtruncatein theclassifyandmemorizesteps, search results are interpolated directly into thexlsxtask description without sanitization.
Audit Metadata