research
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to investigate and process data from external primary sources such as documentation, source code, and APIs.
- Ingestion points: The agent is instructed to read from external "primary sources" (official docs, source code, specs, first-party APIs) which constitute untrusted external data entering the agent's context (SKILL.md).
- Boundary markers: There are no instructions defining boundary markers or explicit warnings for the agent to ignore instructions embedded within the research material.
- Capability inventory: The skill possesses file-writing capabilities, as it is instructed to save Markdown findings into the local repository (SKILL.md).
- Sanitization: The instructions lack specific requirements for sanitizing, escaping, or filtering content retrieved from external sources before it is processed or written to disk.
Audit Metadata