scoping-survey

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides procedural instructions for research workflows and does not include any executable code, sensitive file access, or network exfiltration commands.
  • [PROMPT_INJECTION]: Indirect prompt injection surface identified: 1. Ingestion points: The skill ingests untrusted data from external sources via web-search, web-research, and literature-engine SOPs. 2. Boundary markers: No specific delimiters or safety instructions are provided to the agent regarding the handling of embedded instructions in the ingested data. 3. Capability inventory: This skill file itself defines no dangerous capabilities like file writing or subprocess execution. 4. Sanitization: No sanitization or input validation of external content is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 06:17 AM