prism
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill interpolates untrusted user data into the agent's context, creating a surface for indirect prompt injection where malicious data could influence the agent's behavior.
- Ingestion points: Untrusted data enters the agent context through the interpolation of the
{{args}}variable inSKILL.md. - Boundary markers: No delimiters or explicit warnings are used to isolate user-provided content from the skill's operational instructions.
- Capability inventory: The skill requests access to high-impact tools including
Bash,Write,Edit, andWebFetch. - Sanitization: There is no evidence of validation or filtering of the input before it is used to determine skill invocation.
Audit Metadata