research
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process data from external primary sources, which introduces a risk of indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: The agent is instructed to investigate official documentation, source code, specifications, and first-party APIs as described in
SKILL.md. - Boundary markers: The instructions do not include markers or directives for the agent to distinguish between the research task and potential instructions embedded within the external content.
- Capability inventory: The skill has the ability to write output directly to the repository as a Markdown file, as specified in
SKILL.md. - Sanitization: There are no explicit requirements for the agent to sanitize, escape, or validate the content retrieved from external sources before processing or saving it.
Audit Metadata