search-strategy
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a framework for processing and synthesizing data from untrusted external sources, creating a surface for indirect prompt injection.
- Ingestion points: Data is fetched from
~~chat,~~knowledge base, and~~project trackeras defined inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or clear separation between system instructions and data retrieved from external sources during the synthesis phase.
- Capability inventory: While this file contains documentation, the implementing agent typically has capabilities to execute shell commands or file operations based on synthesized search results.
- Sanitization: There is no mention of sanitization, escaping, or validation of the content retrieved from search sources before it is processed by the agent.
Audit Metadata