support
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely composed of markdown documentation. No scripts, binaries, or automated tools were found within the skill files or metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill defines templates for support responses that incorporate external data such as user names and issue descriptions. While this introduces a potential surface for indirect prompt injection, the risk is negligible as the skill lacks any operational capabilities (file system access, network operations, or command execution) to exploit.
- Ingestion points: Support tickets, user names, and feature requests processed via templates in
SKILL.md. - Boundary markers: Absent; templates use simple brackets like
[Name]without specific delimiters or safety instructions. - Capability inventory: None; the skill does not request or use any tools or scripts.
- Sanitization: Absent; no sanitization logic is provided for the interpolated data.
Audit Metadata