era-alpha
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied industry or direction data via the
$ARGUMENTSvariable. While this is the intended purpose, it lacks explicit boundary markers or sanitization instructions to prevent potential prompt injection from the input influencing the agent's behavior during the multi-step research process. * Ingestion points: User input provided via$ARGUMENTSinSKILL.md. * Boundary markers: None present for the$ARGUMENTSinterpolation. * Capability inventory: Executes shell commands (python3 tools/financial_rigor.py), performs web searches, and reads/writes workspace files. * Sanitization: None specified for the input, although the skill mandates cross-checking of the resulting financial data.
Audit Metadata