skills/tonone-ai/tonone/shield-assess/Gen Agent Trust Hub

shield-assess

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it retrieves and processes untrusted data from the internet to fulfill its primary purpose of regulatory assessment.
  • Ingestion points: Step 1 instructs the agent to use WebSearch and WebFetch to gather regulatory guidance from external websites and read existing project documents.
  • Boundary markers: The instructions do not specify any boundary markers (such as XML tags or delimiters) or explicit 'ignore embedded instructions' warnings for the data retrieved from the web.
  • Capability inventory: Across the skill, the agent has access to Bash, Write, WebSearch, and WebFetch, which could be exploited if the agent follows instructions embedded in fetched web content.
  • Sanitization: There is no evidence of content sanitization, validation, or filtering of the retrieved web data before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:50 AM
Security Audit — agent-trust-hub — shield-assess