best-practice-research
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to gather external evidence from official documentation, release notes, and upstream sources using a research tool. This creates a surface for indirect prompt injection, where malicious instructions embedded in external technical documentation could attempt to influence the agent's synthesis. The skill mitigates this risk by explicitly defining a 'Terminal By Default' policy that forbids writing files, committing code, or running mutating commands based on the research results.
Audit Metadata