research
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and outputs it to files, creating an attack surface where malicious instructions in the source material could influence the agent.
- Ingestion points: The agent is instructed to read official documentation, source code, specifications, and first-party APIs from external sources (SKILL.md).
- Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore potential instructions embedded within the researched documents.
- Capability inventory: The agent has the capability to write findings to the repository as Markdown files (SKILL.md).
- Sanitization: There are no requirements for sanitizing or escaping the content retrieved from external sources before writing it to the filesystem.
Audit Metadata