wkc-research
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user-supplied file paths and URLs which can lead to the agent following instructions embedded in that data.
- Ingestion points: Section 1 of SKILL.md specifies reading "Everything the user supplied" and external "URLs" provided in the input.
- Boundary markers: The instructions do not define boundary markers (like XML tags or delimiters) or provide explicit "ignore embedded instructions" warnings for the agent when processing external data.
- Capability inventory: The skill has the capability to write and modify files (specifically the PRD file) based on the ingested research material.
- Sanitization: There are no instructions for sanitizing or validating the content retrieved from external files or URLs before it is processed and used to update project documentation.
Audit Metadata