shield-recon
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting data from untrusted sources and using it to guide agent actions.
- Ingestion points: Step 1 uses
WebFetchandWebSearchto retrieve content from the internet andReadto access project documents (SKILL.md). - Boundary markers: Absent. The skill does not define delimiters or provide instructions to the agent to ignore instructions embedded within the data it processes.
- Capability inventory: The skill is configured with access to
Bash,Write,Glob,Grep,WebFetch, andWebSearchtools (SKILL.md). - Sanitization: Absent. There is no evidence of sanitization, validation, or escaping of the content retrieved from external or local sources before it is processed by the agent.
Audit Metadata