datapack-builder
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest and process data from external, untrusted sources.
- Ingestion points: According to the workflow in Phase 1, the skill accesses data from uploaded documents, web searches for public filings, and MCP server data.
- Boundary markers: The instructions lack explicit boundary markers or delimiters (e.g., XML tags or specific 'ignore' instructions) to separate untrusted external data from the agent's core instructions.
- Capability inventory: The skill utilizes web search capabilities and is instructed to use the xlsx skill for file manipulation and creation.
- Sanitization: There are no instructions for sanitizing, validating, or escaping content extracted from external sources before it is processed by the agent.
Audit Metadata