tradeoff-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data including documentation, benchmarks, pricing, and source code. This creates a surface for indirect prompt injection where instructions embedded in external content could influence the agent's behavior during the analysis phase.
- Ingestion points: The skill instructs the agent to read external docs, benchmarks, and the local codebase in the 'Before you start' section of
SKILL.md. - Boundary markers: No specific delimiters or safety warnings for handling untrusted data are provided in the instructions.
- Capability inventory: The skill relies on the agent's default tools to read files and potentially access the web, though no specific tools are listed in the YAML frontmatter.
- Sanitization: No explicit sanitization or filtering of the ingested content is defined in the instructions.
Audit Metadata