indexion-segment
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text from user-provided input files to generate document segments. This capability creates an attack surface for indirect prompt injection, as adversarial content within the source files could influence the behavior of an AI agent that processes the resulting segments in a RAG pipeline. The skill lacks explicit sanitization or boundary marking for the ingested content.
- [NO_CODE]: The skill package contains only documentation and command-line instructions (SKILL.md) and does not include any accompanying script files, binaries, or automated installation logic.
Audit Metadata