contract-update
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external contract definitions and change requests, which serves as a potential vector for indirect prompt injection.
- Ingestion points: The skill reads user-provided 'Old vs new contract' data and external schema source files as part of its core workflow.
- Boundary markers: There are no specific instructions or delimiters provided to the agent to help it distinguish between data to be processed and potential embedded instructions.
- Capability inventory: The skill is authorized to perform file-write operations to update contract specifications and client source code.
- Sanitization: The instructions lack explicit steps for sanitizing or validating the input data before processing it into code or configuration.
Audit Metadata