validate-research-gap
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and YAML configuration. It contains no executable scripts, shell commands, binaries, or active code components.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a protocol for processing external research claims and evidence, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill accepts
gap_claimandevidence_setas primary inputs inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to treat these inputs as untrusted data.
- Capability inventory: The skill is limited to high-level orchestration of other research-related skills; it lacks direct capabilities for network operations, file system modifications, or shell execution.
- Sanitization: No validation or sanitization logic is specified for the ingested content.
Audit Metadata