grill-me
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from the codebase which could contain malicious instructions.
- Ingestion points: User-provided plans and local files retrieved via codebase exploration (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions found within the codebase.
- Capability inventory: Implied read access to the local filesystem for exploration tasks.
- Sanitization: No sanitization or escaping mechanisms are described for processing external content.
Audit Metadata