biomimetic-transfer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external input provided by the user in the form of 'target_problem' and 'target_function'. This creates a surface where malicious instructions could be embedded in the data to influence the agent's behavior during the analysis phase.
- Ingestion points: Defined in SKILL.md under mode_contracts as target_problem and target_function.
- Boundary markers: The execution protocol does not specify the use of delimiters or 'ignore' instructions when processing these inputs.
- Capability inventory: The skill itself contains no shell commands, network operations, or file system writes, though it orchestrates other skills.
- Sanitization: No sanitization or validation of the input content is described in the skill definition.
- [NO_CODE]: The skill consists exclusively of markdown and YAML configuration. No scripts (Python, Node.js, Shell) or binary files are included, which limits the potential for direct system exploitation.
Audit Metadata