engineer-code
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it ingests and processes untrusted data in the form of Python code and feedback signals, which are then used to influence agent output.
- Ingestion points: The skill takes Python code components and natural language or executable feedback signals as inputs, as defined in SKILL.md.
- Boundary markers: There are no instructions to use specific delimiters or protective warnings to prevent the agent from following instructions potentially embedded within the ingested code or critiques.
- Capability inventory: The skill provides the agent with the ability to generate and structure Python optimization loops that include subprocess execution and error handling, creating a functional path for potential exploits if input data is malicious.
- Sanitization: The instructions lack guidance on sanitizing or validating the input Python code or feedback before processing it.
Audit Metadata