claim-evidence-matrix
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from workspace files to generate an output artifact.
- Ingestion points: The script
scripts/run.pyreads data fromoutline/outline.ymlandpapers/paper_notes.jsonl. - Boundary markers: The resulting
outline/claim_evidence_matrix.mdfile does not use clear delimiters or instructions to prevent the agent from following potential commands embedded in the processed data. - Capability inventory: The skill has file-writing capabilities via its helper script.
- Sanitization: No data sanitization or validation is performed on the content extracted from the input files before it is written to the output matrix.
Audit Metadata