research
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process data from external 'primary sources' such as official documentation and first-party APIs, which is an inherent attack surface for indirect prompt injection.
- Ingestion points: The agent reads external official documentation, source code, and API responses as specified in SKILL.md.
- Boundary markers: There are no specific instructions or delimiters provided to ensure the agent ignores or sanitizes instructions that might be embedded within the researched content.
- Capability inventory: The skill performs file writing operations to save findings into the repository.
- Sanitization: No sanitization or content validation steps are mentioned to protect against malicious payloads in the external sources.
Audit Metadata