grill-me
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to "explore the codebase" to answer questions, which creates a surface for indirect prompt injection if the codebase contains malicious instructions.
- Ingestion points: Files within the user's codebase (SKILL.md).
- Boundary markers: None defined in the skill instructions to delimit or ignore instructions found in the codebase.
- Capability inventory: The skill encourages codebase exploration, which typically involves file-reading tools.
- Sanitization: No explicit sanitization or filtering instructions are provided for the content retrieved from the codebase.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any executable scripts, binary files, or configuration files that could hide malicious logic.
Audit Metadata