validate
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted content provided by the user, which creates a surface for indirect prompt injection.
- Ingestion points: Artifacts (files, plans, or code) are accepted from the user as described in the Workflow section of SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or warnings to prevent the coordinator or sub-agents from following instructions that might be embedded within the artifacts being reviewed.
- Capability inventory: The skill coordinates the dispatch of specialist sub-agents but does not directly execute shell commands, perform network operations, or write to the file system.
- Sanitization: There is no evidence of sanitization, escaping, or filtering applied to the user-provided data before it is passed to the sub-agents for analysis.
Audit Metadata