anchor-sheet
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from
outline/evidence_drafts.jsonlto create anchors that dictate the content of a downstream writing task. \n- Ingestion points: Untrusted content is read fromoutline/evidence_drafts.jsonlbyscripts/run.py. \n- Boundary markers: No explicit data boundary markers are used in the output file, but the usage policy defines strict constraints. \n- Capability inventory: The skill script executes file read and write operations within the workspace. \n- Sanitization: The script implements_META_ANCHOR_REto identify and discard instructional phrases or prompt-like patterns found in the evidence data, reducing the risk of indirect injection.
Audit Metadata